PT-2026-32887 · Microsoft · Snipping Tool+1

Marcos Díaz · CVE-2026-33829 · Published 2026-04-14 · Updated 2026-06-20

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Snipping Tool (affected versions not specified)

Description An information disclosure issue exists in the Windows Snipping Tool that allows remote attackers to capture NTLM authentication responses from users. This occurs when a victim is tricked into visiting a malicious webpage or opening a crafted link that invokes the Snipping Tool via the ms-screenclip or ms-screensketch URI schemes. The flaw enables the attacker to perform spoofing attacks over a network by capturing sensitive authentication hashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-05657

CVE-2026-33829

Affected Products

Snipping Tool

Windows

References · 37

• 🔥 https://github.com/blackarrowsec/redteam-research/tree/master/CVE-2026-33829 · Exploit
• 🔥 https://exploit-db.com/exploits/52567 · Exploit
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-33829 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33829 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33829 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05657 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33829 · Security Note
• https://twitter.com/Im_AjayPrakash/status/2046721832146096570 · Twitter Post
• https://t.me/ZerodayAlert/727 · Telegram Post
• https://twitter.com/0x534c/status/2044491392207224870 · Twitter Post
• https://twitter.com/packetrat_/status/2044838499405447609 · Twitter Post
• https://twitter.com/khawrzm/status/2068255209575317972 · Twitter Post
• https://twitter.com/redsecuretech/status/2057831487706165379 · Twitter Post
• https://twitter.com/7h3h4ckv157/status/2067658259750961220 · Twitter Post
• https://twitter.com/CyberWolfGuard/status/2045046094854234421 · Twitter Post