CVE-2025-62221

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 and later

Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the cldflt.sys driver used by services such as Microsoft OneDrive. A use-after-free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or unauthorized code execution. This flaw allows an authorized local attacker to escalate privileges to the SYSTEM level, granting full control over the affected system. This issue has been actively exploited in real-world incidents.

Recommendations Update Microsoft Windows to the December 2025 security patch level.