CVE-2025-29973: Microsoft Azure File Sync

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure File Sync: version 19.0.0.0 only; version 20.0.0.0 only

Published 2025-05-13. Last modified 2026-06-17.