High · published December 9, 2025
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 84.6th percentile for exploit probability.
⚡ A moment of negligence, and you've just handed the keys to your castle! This use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver could let an unauthorized attacker escalate their privileges locally. 🔥 Think of it like a restaurant staff member who forgets to lock the pantry. Now, anyone with access can waltz in and grab the chef's secret recipes, or worse, change them! An attacker could exploit this vulnerability to gain administrative privileges on the system. This means they could execute malicious code, steal sensitive data, or wreak havoc on the entire network – absolutely devastating!
Think of it like a restaurant staff member who forgets to lock the pantry. Now, anyone with access can waltz in and grab the chef's secret recipes, or worse, change them! This vulnerability arises due to improper management of memory after it has been freed, allowing attackers to exploit this flaw to elevate their permissions and gain unauthorized control of the system.
An attacker could exploit this vulnerability to gain administrative privileges on the system. This means they could execute malicious code, steal sensitive data, or wreak havoc on the entire network – absolutely devastating! Immediate action is necessary! Apply the latest security patches provided by Microsoft for the affected Windows versions. Additionally, conduct a thorough review of permissions and access rights to prevent unauthorized access. 🛡️ You've got this! Stay proactive with these steps, and you'll reinforce your defenses in no time! 🚀
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_1809 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_10_21h2 | < 10.0.19044.6691 | 10.0.19044.6691 |
| microsoft/windows_10_22h2 | < 10.0.19045.6691 | 10.0.19045.6691 |
| microsoft/windows_11_23h2 | < 10.0.22631.6345 | 10.0.22631.6345 |
| microsoft/windows_11_24h2 | < 10.0.26100.7392 | 10.0.26100.7392 |
| microsoft/windows_11_25h2 | < 10.0.26200.7392 | 10.0.26200.7392 |
| microsoft/windows_server_2019 | < 10.0.17763.8146 | 10.0.17763.8146 |
| microsoft/windows_server_2022 | < 10.0.20348.4467 | 10.0.20348.4467 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2025 | 10.0.25398.2025 |
| microsoft/windows_server_2025 | < 10.0.26100.7392 | 10.0.26100.7392 |