CVE-2025-62221: high-severity vulnerability in Microsoft Windows 10 Version 1809
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a public proof of concept.
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CTIR Gov · ALERTA 21/2025Vulnerabilidade crítica no Microsoft Windows Cloud Files Mini Filter Driverread on gov.br ↗
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Windows Cloud Files Mini Filter Driver allows an authorized user to gain higher system privileges by exploiting a memory error. This can let them take control of the system.
Use-after-free vulnerability in Windows Cloud Files Mini Filter Driver enables local privilege escalation when an authenticated attacker triggers access to freed memory. Exploitation requires prior local access and valid credentials; successful exploitation grants elevated system privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.