Microsoft Azure File Sync — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure File Sync, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-53729 — CVSS 7.8 (high): Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
• CVE-2025-29973 — CVSS 7.0 (high): Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally.
• CVE-2024-21397 — CVSS 5.3 (medium): Microsoft Azure File Sync Elevation of Privilege Vulnerability
• CVE-2024-35253 — CVSS 4.4 (medium): Microsoft Azure File Sync Elevation of Privilege Vulnerability