NetSight
high7.8

CVE-2025-49693

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Impact

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 22h2
before 10.0.22621.5624
MicrosoftWindows 11 23h2
before 10.0.22631.5624
MicrosoftWindows 11 24h2
before 10.0.26100.4652
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1732
MicrosoftWindows Server 2025
before 10.0.26100.4652

Weakness classification

References