CVE detail
CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability
Published 2025-12-09 · Modified 2025-12-09 · Source kev
HIGH
severity
CVSS-derived band
0.0242
EPSS probability
exploitation probability, 30d
83.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2025-12-30
⚠ Actively exploited in the wild — CISA KEV listed 2025-12-09, federal remediation due 2025-12-30.
Description
Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References