MSRC-CVE-2025-55680 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.

Security updates
10.0.26200.6899 — https://support.microsoft.com/help/5066835
10.0.17763.7919 — https://support.microsoft.com/help/5066586
10.0.20348.4294 — https://support.microsoft.com/help/5066782
10.0.19044.6456 — https://support.microsoft.com/help/5066791
10.0.22621.6060 — https://support.microsoft.com/help/5066793
10.0.25398.1913 — https://support.microsoft.com/help/5066780

Vulnerabilities 1

High 7.8

CVE-2025-55680

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 14, 2025

Revision history

2025-10-14 #1
Information published.

References

CVE-2025-55680 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55680
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss