CVE-2025-54105
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A race condition caused by improper synchronization of a shared resource exists in Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized local attacker could exploit the race to escalate privileges on Windows.
Recommendation
Apply Microsoft security updates for Brokering File System and restrict local access to untrusted users.
Other vulnerabilities in Microsoft Brokering File System
See all- CVE-2026-50458High
Use-after-free vulnerability in Microsoft Brokering File System that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50361High
A double free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50305High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-49162High
A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
- CVE-2025-62569High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. The vulnerability affects a Windows system component.
- CVE-2025-62469High
A race condition in Microsoft Brokering File System due to concurrent execution using a shared resource with improper synchronization allows an authorized attacker to elevate privileges locally.
- CVE-2025-59189High
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS