Lucene search
+L

741 matches found

Krebs on Security
Krebs on Security
•added 2025/04/09 3:09 a.m.•35 views

Patch Tuesday, April 2025 Edition

Microsoft today released updates to plug at least 121 security holes in its Windows operating systems and software, including one vulnerability that is already being exploited in the wild. Eleven of those flaws earned Microsoft's most-dire "critical" rating, meaning malware or malcontents could...

8.1CVSS8.1AI score0.13904EPSS
SaveExploits7
BDU FSTEC
BDU FSTEC
•added 2025/04/09 12:00 a.m.•23 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to a system-level level.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their system-level privileges...

7.8CVSS7.7AI score0.13904EPSS
SaveExploits5References3
Microsoft Secure
Microsoft Secure
•added 2025/04/08 6:00 p.m.•91 views

Exploitation of CLFS zero-day leads to ransomware activity

Microsoft Threat Intelligence Center MSTIC and Microsoft Security Response Center MSRC have discovered post-compromise exploitation of a zero-day elevation of privilege vulnerability in the Windows Common Log File System CLFS against a small number of targets. The targets include organizations in...

9.3CVSS8.1AI score0.13904EPSS
SaveExploits5
Vulnrichment
Vulnrichment
•added 2025/04/08 5:23 p.m.•48 views

CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

7.8CVSS7.2AI score0.13904EPSS
SaveExploits5References1
CVE
CVE
•added 2025/04/08 5:23 p.m.•817 views

CVE-2025-29824

CVE-2025-29824 is a Use-After-Free vulnerability in the Windows Common Log File System Driver (CLFS) kernel driver, caused by a race condition in W32PROCESS handling via WaitForInputIdle that enables local privilege escalation to SYSTEM. Microsoft patched this in April 2025 (KB5044284). Public ex...

7.8CVSS7.5AI score0.13904EPSS
SaveIn wildExploits5References4Affected Software15
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•6 views

Microsoft Windows Common Log File System Driver 资源管理错误漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access...

7.8CVSS8.6AI score0.13904EPSS
SaveExploits5References2
CISA KEV Catalog
CISA KEV Catalog
•added 2025/04/08 12:00 a.m.•115 views

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows Common Log File System CLFS Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.13904EPSS
SaveIn wildExploits5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•2 views

CVE-2025-29824: Use After Free

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS8AI score0.13904EPSS
SaveExploits5References2
BDU FSTEC
BDU FSTEC
•added 2025/03/14 12:00 a.m.•16 views

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.00544EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/03/13 7:11 p.m.•20 views

CVE-2025-24059

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS8.6AI score0.00544EPSS
SaveExploits0References3
NVD
NVD
•added 2025/03/11 5:16 p.m.•18 views

CVE-2025-24059

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00544EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 4:59 p.m.•13 views

CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

7.8CVSS7.7AI score0.00544EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/03/11 2:00 p.m.•31 views

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7AI score0.00544EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•14 views

PT-2025-10810 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an incorrect conversion between numeric types in the Windows Common Log File System Driver, which allows an authorized attacker to...

7.8CVSS8.2AI score0.00544EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•1 views

CVE-2025-24059: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.00544EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•17 views

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

7.8CVSS8.4AI score0.00544EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/12/16 12:00 a.m.•11 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Microsoft Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Microsoft Windows is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.9AI score0.01042EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/12 2:04 a.m.•40 views

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

7.8CVSS0.26215EPSS
SaveExploits6References4
OSV
OSV
•added 2024/12/12 2:04 a.m.•5 views

CVE-2024-49138

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.26215EPSS
SaveExploits6References4
OSV
OSV
•added 2024/12/12 2:04 a.m.•6 views

CVE-2024-49090

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.01071EPSS
SaveExploits0References1
Rows per page
Query Builder