What the vulnerability does
01Description
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-62221
HIGH
CVE-2025-62221: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS base score
7.8/10
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA mandated remediation
02CISA Required Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Key dates
03Disclosure timeline
December 9, 2025
CVE published
April 16, 2026
Record updated
External resources
04References
NVD — National Vulnerability Database
https://nvd.nist.gov/vuln/detail/CVE-2025-62221
CWE — Common Weakness Enumeration
https://cwe.mitre.org/data/definitions/416.html
CISA KEV Reference
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CV…
CISA KEV Reference
https://nvd.nist.gov/vuln/detail/CVE-2025-62221
Related vulnerabilities
