CVE-2025-53729HighCVSS 7.8
Microsoft Azure File Sync Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
🎯 Affected products4
- Azure File Sync v18
- Azure File Sync v19
- Azure File Sync v20
- Azure File Sync v21
✅ Remediation
KBRelease Notes (Security Update) — fixed build 18.3.0.0 KBRelease Notes (Security Update) — fixed build 19.2.0.0 KBRelease Notes (Security Update) — fixed build 20.1.0.0 KBRelease Notes (Security Update) — fixed build 21.1.0.0
🔗 References (6)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53729
- patchhttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v18-3-release-august-2025-security-only-update-8c8bc089-6f56-44d5-90b0-5cb33f66663c
- referencehttps://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-release-notes
- patchhttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v19-2-release-august-2025-security-only-update-5b457dbd-7615-490b-84ea-235fde9d65c8
- patchhttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v20-1-release-august-2025-security-only-update-6a558f5d-005d-4111-9ebd-21e5dd652d77
- patchhttps://support.microsoft.com/en-us/topic/azure-file-sync-agent-v21-1-release-august-2025-security-only-update-e0016f74-573d-492c-8bf7-c3be1e380836