CVE-2025-5474

CVE-2025-5474 concerns 2BrightSparks SyncBackFree. The flaw is reported within the Mirror functionality: by creating a junction, a local attacker can abuse the service to delete arbitrary files and escalate privileges to SYSTEM. Exploitation requires local access, low-privilege code execution, an...