Windows Common Log File System Driver Elevation of Privilege Vulnerability

🗓️ 14 Jan 2020 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 29 Views

Windows CLFS Driver Privilege Vulnerabilit

Reporter	Title	Published	Views	Family All 48
BDU FSTEC	The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain increased privileges.	20 Jan 202000:00	–	bdu_fstec
Circl	CVE-2020-0634	29 Nov 202312:18	–	circl
CNVD	Microsoft Windows Common Log File System Driver Privilege Vulnerability	21 Jan 202000:00	–	cnvd
Check Point Advisories	Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-0634)	14 Jan 202000:00	–	checkpoint_advisories
CVE	CVE-2020-0634	14 Jan 202023:11	–	cve
Cvelist	CVE-2020-0634	14 Jan 202023:11	–	cvelist
EUVD	EUVD-2020-2128	7 Oct 202500:30	–	euvd
Microsoft KB	January 14, 2020—KB4528760 (OS Builds 18362.592 and 18363.592) - EXPIRED	14 Jan 202008:00	–	mskb
Microsoft KB	January 14, 2020—KB4534271 (OS Build 14393.3443)	14 Jan 202008:00	–	mskb
Microsoft KB	January 14, 2020—KB4534273 (OS Build 17763.973)	14 Jan 202008:00	–	mskb

Vulners

Node

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

14 Jan 2020 08:00Current

8.6High risk

Vulners AI Score8.6

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.01232

windows common log file system elevation of privilege vulnerability memory handling security update microsoft