CVE-2025-59189
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain higher privileges on the system, potentially leading to system compromise and breach of confidentiality, integrity, and availability.
Recommendation
Apply security updates provided by Microsoft for Windows. Keep the operating system regularly updated.
Other vulnerabilities in Microsoft Brokering File System
See all- CVE-2026-50458High
Use-after-free vulnerability in Microsoft Brokering File System that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50361High
A double free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-50305High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-49162High
A use-after-free vulnerability exists in the Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
- CVE-2025-62569High
A use-after-free vulnerability in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. The vulnerability affects a Windows system component.
- CVE-2025-62469High
A race condition in Microsoft Brokering File System due to concurrent execution using a shared resource with improper synchronization allows an authorized attacker to elevate privileges locally.
- CVE-2025-54105High
A race condition caused by improper synchronization of a shared resource exists in Microsoft Brokering File System. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS