CVE-2025-62469
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A race condition in Microsoft Brokering File System due to concurrent execution using a shared resource with improper synchronization allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local low-privileged user can gain administrative privileges on a Windows system, posing a serious threat to data confidentiality and integrity.
Recommendation
Apply Microsoft security updates for the Brokering File System and restrict local access to trusted users.
Other vulnerabilities in Microsoft Brokering File System
See all- CVE-2026-50458High
Use-after-free vulnerability in Microsoft Brokering File System that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50361High
A double free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50305High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-49162High
A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
- CVE-2025-62569High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. The vulnerability affects a Windows system component.
- CVE-2025-59189High
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-54105High
A race condition caused by improper synchronization of a shared resource exists in Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS