Microsoft Brokering File System Vulnerability Let Attackers Escalate Privileges

Cybersecuritynews •Abinaya • December 22, 2025

Microsoft has patched a significant use-after-free vulnerability in its Brokering File System (BFS) driver, tracked as CVE-2025-29970. The flaw enables local attackers to escalate privileges on Windows systems running isolated or sandboxed applications, making it a notable concern for enterprise security. The vulnerability exists in bfs.sys, a minifilter driver developed alongside Windows AppContainer and AppSilo, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft File System Vulnerability Allows Local Privilege Escalation A vulnerability in Microsoft's brokering file system has been identified, allowing local privilege escalation. This issue affects users of Microsoft systems, potentially enabling unauthorized access to sensitive data. The vulnerability has been assigned CVE-2025-29970. 4 sources 40

Extracted Entities

CVEs (1)

CVE-2025-29970

Platforms (1)

Windows