PoC Exploit Released for Windows Snipping Tool NTLM Hash Leak Vulnerability

**CVE-2026-33829 — Windows Snipping Tool PoC:** A publicly released proof-of-concept abuses the Snipping Tool's `ms-screensketch` deep link by passing a UNC `filePath` that forces the victim's system to authenticate to an attacker-controlled SMB server, leaking Net-NTLM hashes; Microsoft issued a patch on April 14, 2026 — apply the update and block outbound SMB (port 445).