PT-2025-50155 · Microsoft · Windows

Published

2025-12-09

·

Updated

2025-12-10

·

CVE-2025-62221

CVSS v3.1
7.8
VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)
Description A use-after-free condition exists in the Windows Cloud Files Mini Filter Driver. This allows a local attacker to gain elevated privileges. The issue is related to the Windows Cloud Files Mini Filter Driver and enables local privilege escalation with minimal user interaction. This flaw was addressed as part of Microsoft’s December 2025 Patch Tuesday, which fixed 57 flaws, including three critical bugs and one actively exploited zero-day.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Use After Free

Weakness Enumeration

Related Identifiers

CVE-2025-62221

Affected Products

Windows