CVE-2025-29973 Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally

Description

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Azure File Sync 1.0	1.0.0 → < 26100	26100

Other CVEs of Azure File Sync

The 4 CVEs of Azure File Sync →

CVE-2025-53729 Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally 7.8 High CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability 4.4 Medium CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability 5.3 Medium