CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2025-62221

Microsoft Windows Use After Free Vulnerability

Microsoft Windows CWE-416

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

CVSS Score
7.8
High
EPSS — Exploit Probability
1.5%
Riskier than 82% of all CVEs
Exploitation
Confirmed in the wild
Used in ransomware campaigns
Remediation
Patch available
Federal deadline 2025-12-30
CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2025-12-30.

NVD entry Vendor patch PoC / advisory CISA KEV

1 article across 1 outlet · first covered May 18, 2026 · latest May 18, 2026

Coverage timeline

Related CVEs — Microsoft

CVE-2026-41091KEV CVE-2008-4250KEV CVE-2009-1537KEV CVE-2010-0249KEV CVE-2010-0806KEV CVE-2026-45498KEV CVE-2026-33825KEV CVE-2026-42897KEV