CVE-2025-53142 - Microsoft Brokering File System Elevation of Privilege Vulnerability

HIGH

Microsoft Brokering File System Elevation of Privilege Vulnerability

Published Aug 12, 2025

7.0

HIGH

CVSS 3.1

EPSS 0.36%

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Vendor Microsoft Product Windows 11 Version 23H2 Default
unknown
Affected
- ≥ 10.0.22631.0, < 10.0.22631.5768
Vendor Microsoft Product Windows 11 Version 24H2 Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.4946
Vendor Microsoft Product Windows 11 version 22H2 Default
unknown
Affected
- ≥ 10.0.22621.0, < 10.0.22621.5768
Vendor Microsoft Product Windows 11 version 22H3 Default
unknown
Affected
- ≥ 10.0.22631.0, < 10.0.22631.5768
Vendor Microsoft Product Windows Server 2022, 23H2 Edition (Server Core installation) Default
unknown
Affected
- ≥ 10.0.25398.0, < 10.0.25398.1791
Vendor Microsoft Product Windows Server 2025 Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.4946
Vendor Microsoft Product Windows Server 2025 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.26100.0, < 10.0.26100.4946

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 11 Version 23H2	unknown	Affected ≥ 10.0.22631.0, < 10.0.22631.5768
Microsoft	Windows 11 Version 24H2	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.4946
Microsoft	Windows 11 version 22H2	unknown	Affected ≥ 10.0.22621.0, < 10.0.22621.5768
Microsoft	Windows 11 version 22H3	unknown	Affected ≥ 10.0.22631.0, < 10.0.22631.5768
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	unknown	Affected ≥ 10.0.25398.0, < 10.0.25398.1791
Microsoft	Windows Server 2025	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.4946
Microsoft	Windows Server 2025 (Server Core installation)	unknown	Affected ≥ 10.0.26100.0, < 10.0.26100.4946

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24325		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53142		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Aug 12, 2025

Updated Feb 26, 2026

Reserved Jun 26, 2025

CISA Vulnrichment

Updated Aug 13, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Aug 12, 2025

Updated Feb 26, 2026

GitHub

No data