High · 7.8 CVE-2025-50170 EUVD-2025-24341GHSA-9mw6-xc46-hffj

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Published Aug 12, 2025 · Updated Feb 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 version 22H2 Product: Windows 11 version 22H3 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Product: Windows Server 2022, 23H2 Edition (Server Core installation) Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.7678	10.0.17763.7678
Microsoft	Windows 10 Version 21H2	10.0.19044.0 – < 10.0.19044.6216	10.0.19044.6216
Microsoft	Windows 10 Version 22H2	10.0.19045.0 – < 10.0.19045.6216	10.0.19045.6216
Microsoft	Windows 11 version 22H2	10.0.22621.0 – < 10.0.22621.5768	10.0.22621.5768
Microsoft	Windows 11 version 22H3	10.0.22631.0 – < 10.0.22631.5768	10.0.22631.5768
Microsoft	Windows 11 Version 23H2	10.0.22631.0 – < 10.0.22631.5768	10.0.22631.5768
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.7678	10.0.17763.7678
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.7678	10.0.17763.7678
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.4052	10.0.20348.4052
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0 – < 10.0.25398.1791	10.0.25398.1791
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.4946	10.0.26100.4946

Advisories 3

WID-SEC-2025-1790 Microsoft Windows und Windows Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 20, 2025
NCSC-2025-0251 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Aug 13, 2025
MSRC-CVE-2025-50170 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Microsoft Security Response Center · Aug 12, 2025

References

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability vendor-advisory patch