118 matches found
CVE-2025-32706
CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...
CVE-2025-32701
CVE-2025-32701 is a Windows CLFS driver use-after-free vulnerability that can allow an authorized attacker to elevate privileges locally. The weakness affects the Windows Common Log File System Driver and has a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, an...
CVE-2025-32701: Use After Free
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32706: Improper Input Validation
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32706
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2025-30385: Use After Free
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
PT-2025-21008
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver versions prior to the fixed version Description The issue is related to improper input validation in the Windows Common Log File System Driver, allowing an authorized attacker to elevate privileges locally...
PT-2025-21003
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The issue is related to a use-after-free vulnerability in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...
PT-2025-20995 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to the fixed version Description: The issue is related to a use-after-free flaw in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-29824: Use After Free
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
PT-2025-10810 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an incorrect conversion between numeric types in the Windows Common Log File System Driver, which allows an authorized attacker to...
CVE-2025-24059: Incorrect Conversion between Numeric Types
Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2024-49090: Untrusted Pointer Dereference
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
PT-2024-9321
Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The vulnerability is an elevation-of-privilege issue in the Windows Common Log File System Driver. It allows attackers to gain SYSTEM privileges on Windows...
CVE-2024-49088: Buffer Over-read
Windows Common Log File System Driver Elevation of Privilege Vulnerability...