CVE-2025-62221

high

Description

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

From the Tenable Blog

Microsoft’s December 2025 Patch Tuesday Addresses 56 CVEs (CVE-2025-62221)

Published: 2025-12-09

Microsoft addresses 56 CVEs, including two publicly disclosed vulnerabilities and one zero-day that was exploited in the wild to close out the final Patch Tuesday of 2025

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62221

https://www.threatlocker.com/blog/miniplasma-windows-privilege-escalation-zero-day-affects-fully-patched-systems

https://thehackernews.com/2026/05/miniplasma-windows-0-day-enables-system.html

https://thehackernews.com/2025/12/microsoft-issues-security-fixes-for-56.html

https://securityaffairs.com/185523/security/u-s-cisa-adds-microsoft-windows-and-winrar-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://securityaffairs.com/185515/breaking-news/microsoft-patch-tuesday-security-updates-for-december-2025-fixed-an-actively-exploited-zero-day.html

https://www.theregister.com/2025/12/09/december_2025_patch_tuesday/

https://www.cisa.gov/news-events/alerts/2025/12/09/cisa-adds-two-known-exploited-vulnerabilities-catalog

https://www.tenable.com/blog/microsofts-december-2025-patch-tuesday-addresses-56-cves-cve-2025-62221

https://github.com/Hatchepsoute/sigma-rules

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-62221

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-202200

Details

Source: Mitre, NVD

Published: 2025-12-09

Updated: 2026-09-25

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.08212

Detections

Analytics