CVE-2025-49677: Microsoft Brokering File System Elevation of Privilege Vulnerability
Published Jul 8, 2025
·Updated
Microsoft Brokering File System Elevation of Privilege Vulnerability
Other sources
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Windows 11=22H2
Microsoft Windows 11=22H2
Microsoft Windows 11 22h2<10.0.22621.5624
Event History
Jul 8, 2025
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·04:57 PM
Data Sourced
via MITRE·04:57 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 16, 2025
Exploit Published
12:00 AM
Known Exploited
10:45 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-49677?
CVE-2025-49677 is considered a high severity vulnerability due to its potential for privilege escalation.
2
How can I fix CVE-2025-49677?
To fix CVE-2025-49677, users should apply the security patch provided by Microsoft for Windows 11 22H2.
3
Who is affected by CVE-2025-49677?
CVE-2025-49677 affects users of Microsoft Windows 11 version 22H2, both on x86_64 and arm64 architectures.
4
What type of vulnerability is CVE-2025-49677?
CVE-2025-49677 is categorized as a 'use after free' vulnerability that enables local privilege escalation.
5
Is CVE-2025-49677 remotely exploitable?
CVE-2025-49677 is not remotely exploitable as it requires local access to the affected system.