NetSight
high7.4

CVE-2026-25167

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

Impact

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 24h2
before 10.0.26100.7979
MicrosoftWindows 11 25h2
before 10.0.26200.7979
MicrosoftWindows 11 26h1
before 10.0.28000.1719
MicrosoftWindows Server 2025
before 10.0.26100.32463

Weakness classification

References