What has become known about the Elevation of Privilege – Windows Common Log File System Driver (CVE-2024-49138) vulnerability from the December Microsoft Patch Tuesday a month later?

🗓️ 15 Jan 2025 09:29:11Reported by Alexander LeonovType

avleonov🔗 avleonov.com👁 25 Views

New details on the Elevation of Privilege vulnerability in Windows Common Log File Driver remain scarce.

Reporter	Title	Published	Views	Family All 75
GithubExploit	Exploit for Heap-based Buffer Overflow in Microsoft	22 Aug 202618:10	–	githubexploit
GithubExploit	Exploit for Heap-based Buffer Overflow in Microsoft	15 Jan 202500:43	–	githubexploit
ATTACKERKB	CVE-2024-49138	12 Dec 202400:00	–	attackerkb
Information Security Automation	New episode “In The Trend of VM” (#11): vulnerabilities that became trending in December and the final report on trending vulnerabilities for 2024	18 Feb 202517:28	–	avleonov
Information Security Automation	December Microsoft Patch Tuesday	10 Dec 202423:19	–	avleonov
Information Security Automation	The Elevation of Privilege – Windows Common Log File System Driver (CVE-2024-49138) has become more critical	16 Jan 202511:46	–	avleonov
BDU FSTEC	The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.	11 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-49138	10 Dec 202417:33	–	circl
CISA KEV Catalog	Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability	10 Dec 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	10 Dec 202412:00	–	cisa

15 Jan 2025 09:29Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.8

EPSS0.25414

cve 2024 49138 microsoft patch tuesday heap based buffer overflow local attacker system privileges