All vulnerabilities
CVE-2025-62221

Microsoft Windows Use After Free Vulnerability

Microsoft WindowsOperating systems
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 9 Dec 2025CISA KEV
Exploit odds (EPSS)2.50%Chance of exploitation activity in the next 30 days, higher than 84% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in10.0.17763.8146Also 10.0.19044.6691, 10.0.19045.6691 and 5 moreCVE List
Federal deadline30 Dec 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 10.0.17763.8146Windows 10 Version 1809CVE List
  • 10.0.19044.6691Windows 10 Version 21H2CVE List
  • 10.0.19045.6691Windows 10 Version 22H2CVE List
  • 10.0.22631.6345Windows 11 version 22H3CVE List
  • 10.0.22631.6345Windows 11 Version 23H2CVE List
  • 10.0.26100.7462Windows 11 Version 24H2CVE List
Show all 13 fixed versions
  • 10.0.26200.7462Windows 11 Version 25H2CVE List
  • 10.0.17763.8146Windows Server 2019CVE List
  • 10.0.17763.8146Windows Server 2019 (Server Core installation)CVE List
  • 10.0.20348.4529Windows Server 2022CVE List
  • 10.0.25398.2025Windows Server 2022, 23H2 Edition (Server Core installation)CVE List
  • 10.0.26100.7462Windows Server 2025CVE List
  • 10.0.26100.7462Windows Server 2025 (Server Core installation)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 9 Dec 2025Added to CISA KEVCISA KEV
  2. 9 Dec 2025, 17:56 UTCPublishedCVE List

Description

Microsoft Windows Cloud Files Mini Filter Driver contains a use after free vulnerability that can allow an authorized attacker to elevate privileges locally.

Text from CVE List

Affected versions 13

  • Windows 10 Version 1809affected: 10.0.17763.0 before 10.0.17763.8146CVE List
  • Windows 10 Version 21H2affected: 10.0.19044.0 before 10.0.19044.6691CVE List
  • Windows 10 Version 22H2affected: 10.0.19045.0 before 10.0.19045.6691CVE List
  • Windows 11 version 22H3affected: 10.0.22631.0 before 10.0.22631.6345CVE List
  • Windows 11 Version 23H2affected: 10.0.22631.0 before 10.0.22631.6345CVE List
  • Windows 11 Version 24H2affected: 10.0.26100.0 before 10.0.26100.7462CVE List
  • Windows 11 Version 25H2affected: 10.0.26200.0 before 10.0.26200.7462CVE List
  • Windows Server 2019affected: 10.0.17763.0 before 10.0.17763.8146CVE List
  • Windows Server 2019 (Server Core installation)affected: 10.0.17763.0 before 10.0.17763.8146CVE List
  • Windows Server 2022affected: 10.0.20348.0 before 10.0.20348.4529CVE List
  • Windows Server 2022, 23H2 Edition (Server Core installation)affected: 10.0.25398.0 before 10.0.25398.2025CVE List
  • Windows Server 2025affected: 10.0.26100.0 before 10.0.26100.7462CVE List
  • Windows Server 2025 (Server Core installation)affected: 10.0.26100.0 before 10.0.26100.7462CVE List

References 4