CVE-2025-62569
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. The vulnerability affects a Windows system component.
Risk Assessment
An attacker with local access and valid credentials can gain higher privileges, potentially leading to full host compromise. Risk is especially relevant in multi-user environments.
Recommendation
Apply Microsoft security updates for Windows containing the fix for this vulnerability. Restrict local access to trusted users.
Other vulnerabilities in Microsoft Brokering File System
See all- CVE-2026-50458High
Use-after-free vulnerability in Microsoft Brokering File System that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50361High
A double free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50305High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-49162High
A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
- CVE-2025-62469High
A race condition in Microsoft Brokering File System due to concurrent execution using a shared resource with improper synchronization allows an authorized attacker to elevate privileges locally.
- CVE-2025-59189High
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-54105High
A race condition caused by improper synchronization of a shared resource exists in Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS