CVE-2025-62221
HIGH KEVMicrosoft Windows 10 1809 < 10.0.17763.8146 - Use After Free
Title source: ruleDescription
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Exploits (1)
nomisec
WORKING POC
by Teodor1231241 · poc
https://github.com/Teodor1231241/DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221
Scores
CVSS v3
7.8
EPSS
0.0316
EPSS Percentile
86.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2025-12-09
VulnCheck KEV
2025-12-09
ENISA EUVD
EUVD-2025-202200
CWE
CWE-416
Status
published
Products (23)
microsoft/windows_10_1809
< 10.0.17763.8146 (2 CPE variants)
microsoft/windows_10_21h2
< 10.0.19044.6691
microsoft/windows_10_22h2
< 10.0.19045.6691
Microsoft/Windows 10 Version 1809
10.0.17763.0 - 10.0.17763.8146
Microsoft/Windows 10 Version 21H2
10.0.19044.0 - 10.0.19044.6691
Microsoft/Windows 10 Version 22H2
10.0.19045.0 - 10.0.19045.6691
microsoft/windows_11_23h2
< 10.0.22631.6345
microsoft/windows_11_24h2
< 10.0.26100.7392
microsoft/windows_11_25h2
< 10.0.26200.7392
Microsoft/Windows 11 version 22H3
10.0.22631.0 - 10.0.22631.6345
... and 13 more
Published
Dec 09, 2025
KEV Added
Dec 09, 2025
Tracked Since
Feb 18, 2026