Netskope Threat Labs

OS-WINDOWS Microsoft Windows Brokering File System elevation of privilege attempt

IPS-CFWIPS-SWG

1 SID: 65394

Detects an attempt to exploit CVE-2025-48004, a privilege escalation flaw that can grant higher access in Microsoft Windows Brokering File System.