In CISA KEV7.8 HighCWE-416
CVE-2025-62221
Microsoft Windows Use After Free Vulnerability
MicrosoftWindows
Status
- Exploited in the wild
- In CISA KEV since 9 Dec 2025
- Vendor fix available
Federal deadlineTue 30 Dec 2025, 23:59 UTC
Passed 298 days ago
CISA KEV · added 9 Dec 2025
Exploit probabilityEPSSchecked 22 Oct
2.5%probability of exploitation in the next 30 days
Higher than 85% of scored CVEs
SeverityCVSS
7.8High
Description NVD
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 1 article · 1 outlet
- MiniPlasma PoC reveals unpatched Windows privilege escalation flawThe Hacker News · first in our coverage · mentions it in passing