CVE-2025-5474 2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability

2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 2BrightSparks SyncBackFree. An attacker must first obtain the ability to execute low-privileged code on the target syst...

CVE-2025-5474

CVE-2025-5474 concerns 2BrightSparks SyncBackFree. The flaw is reported within the Mirror functionality: by creating a junction, a local attacker can abuse the service to delete arbitrary files and escalate privileges to SYSTEM. Exploitation requires local access, low-privilege code execution, an...