CVE-2025-21315 is a use-after-free vulnerability (CWE-416) in the Microsoft Brokering File System on Windows 11 Version 24H2 (build 10.0.26100.0). The flaw allows an attacker with low privileges and no user interaction to potentially execute code with elevated privileges due to improper memory handling. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity, with impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as detailed in their security update guide.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to elevate their privileges, potentially gaining full control over the affected system. This impacts confidentiality, integrity, and availability of the system. There are no known exploits in the wild at the time of publication.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 11 Version 24H2 (build 10.0.26100.0) as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21315 for detailed update instructions.