521 matches found
CVE-2024-20653: Out-of-bounds Read
Microsoft Common Log File System Elevation of Privilege Vulnerability...
Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376)
This is part five of our study about the Common Log File System CLFS and five vulnerabilities in this Windows OS component that have been used in ransomware attacks throughout the year. Please read the previous parts first if you havent already. You can skip to the other parts using this table of...
Windows CLFS and five exploits used by ransomware operators
In April 2023, we published a blog post about a zero-day exploit we discovered in ransomware attacks that was patched as CVE-2023-28252 after we promptly reported it to Microsoft. In that blog post, we mentioned that the zero-day exploit we discovered was very similar to other Microsoft Windows...
Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023-28252)
This is part six of our study about the Common Log File System CLFS and five vulnerabilities in this Windows OS component that have been used in ransomware attacks throughout the year. Please read the previous parts first if you havent already. You can go to other parts using this table of...
CVE-2023-36424
CVE-2023-36424 is documented as a Windows kernel-level out-of-bounds read vulnerability in the Common Log File System Driver (clfs.sys) that enables privilege escalation. Connected sources describe a pool overflow/record-validation flaw in clfs.sys (Windows Kernel pool management) exploited via c...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-36424: Out-of-bounds Read
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to disclose protected information.
The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2023-36713
The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...
CVE-2023-36713: Use of Uninitialized Resource
Windows Common Log File System Driver Information Disclosure Vulnerability...
Windows Common Log File System Driver (clfs.sys) Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Common Log File System Driver clfs.sys Elevation of Privilege Vulnerability', 'Description' = %q A privilege escalation vulnerability...
CVE-2023-38144 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-38144 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-38143
Technical details for CVE-2023-38143 are not publicly provided in the supplied documents. Affected product/version, root cause, exploitability, and remediation are not specified here; monitor for official disclosures and vendor advisory updates.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2023-38143: Heap-based Buffer Overflow
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-38144: Buffer Over-read
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
PT-2023-5139 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer out-of-bounds operation in memory when handling BLF log files, which can allow an attacker to elevate their privileges. This i...
