CVE-2025-21315

CVE-2025-21315 is an Elevation of Privilege vulnerability affecting the Microsoft Brokering File System. Published on 2025-01-14, it carries a CVSS v3.1 base score of 7.8 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) and is linked to CWE-416, with additional NVD-CWE-noinfo classification.

A local attacker with low privileges can exploit this vulnerability, which requires high attack complexity but no user interaction. Successful exploitation changes scope and enables high-impact effects on confidentiality, integrity, and availability, allowing privilege escalation on the affected system.

The Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21315 provides details on patches and mitigation guidance.