Microsoft Patches Windows Cloud Files Mini Filter Driver Privilege Escalation Flaws
Active Exploitation · 4 sources · Updated 4mo ago · First seen May 25, 2026
Microsoft disclosed CVE-2025-62221 and CVE-2025-62454, two elevation-of-privilege vulnerabilities in the Windows Cloud Files Mini Filter Driver, and released security updates to address them. The company identified CVE-2025-62221 as an Important flaw caused by a use-after-free condition (CWE-416) that could allow a local attacker with low privileges to gain SYSTEM privileges without user interaction.
Microsoft assigned CVE-2025-62221 a CVSS v3.1 score of 7.8 and said exploitation had been detected in the wild at the time of disclosure, although the vulnerability had not been publicly disclosed beforehand. Advisory listings for CVE-2025-62454 also classify it as a Windows Cloud Files Mini Filter Driver elevation-of-privilege issue, indicating multiple privilege-escalation weaknesses in the same Windows component were addressed in the release.
