Skip to content
COOEY

EXPOSURES › CVE-2025-62221

CVE-2025-62221

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-12-09 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-62221 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Authorized attackers can elevate privileges on Windows systems due to a use after free vulnerability in the Cloud Files Mini Filter Driver.

An unpatched vulnerability in Microsoft's Cloud Files Mini Filter Driver allows authorized attackers to escalate their privileges locally, posing a significant security risk to Windows users.

Shame score — Authorized attackers can exploit an unpatched vulnerability to elevate privileges, leading to a severe security breach.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized