What is CVE-2025-29973?

CVE-2025-29973 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Azure File Sync Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2025-29973 cover?

CVE-2025-29973 covers the following CVE IDs: CVE-2025-29973. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2025-29973?

CVE-2025-29973 has a CVSS v3 base score of 7.0, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2025-29973?

CVE-2025-29973 affects 2 products, including: Azure File Sync v19; Azure File Sync v20.

CVE-2025-29973HighCVSS 7.0

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 31, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-29973 →

📋 Description

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

🎯 Affected products2

Azure File Sync v19
Azure File Sync v20

✅ Remediation

KBRelease Notes (N/A) — fixed build 26100 KBRelease Notes (N/A) — fixed build 5041884

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29973
referencehttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v19-release-september-2024-e44fc142-8a24-4dea-9bf9-6e884b4b342e
referencehttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v20-release-february-2025-b92c9c6f-8232-42d3-a3e0-e6df1fce0f5e