Information disclosure

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-28252

CVE-2023-28252 – Windows CLFS driver local privilege escalation : The vulnerability stems from CLFS.sys handling of file blocks in memory (m_rgBlocks) and associated metadata, enabling an out-of-bounds access that lets an unprivileged user hijack the SYSTEM token. Public PoCs and in-the-wild acti...

CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability

...

Nokoyawa ransomware attacks with Windows zero-day

Updated April 20, 2023 In February 2023, Kaspersky technologies detected a number of attempts to execute similar elevation-of-privilege exploits on Microsoft Windows servers belonging to small and medium-sized businesses in the Middle East, in North America, and previously in Asia regions. These...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28252link is external Microsoft Windows Common Log File System CLFS Driver Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Information Disclosure Vulnerability

...

VulnCheck KEV: CVE-2023-28252

Microsoft Windows Common Log File System CLFS driver contains an unspecified vulnerability that allows for privilege escalation...

PT-2023-2305 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows Common Log File System CLFS driver, which can be exploited to gain unauthorized...

CVE-2023-28252: Heap-based Buffer Overflow

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at April 12, 2023 3:18pm UTC reported: This was discovered because of zero-day exploitation perpetrated by a skilled adversary — final payload was Nokoyawa ransomware in at least one case, as...

Microsoft Windows Common Log File System Driver security vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2023-28266: Buffer Over-read

Windows Common Log File System Driver Information Disclosure Vulnerability...

CVE-2023-0156

The All-In-One Security AIOS WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user admin+ to view the contents of arbitrary files and list directories anywhere on the server to which the web server has access. The plugin only...

CVE-2022-48228

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362...

CVE-2022-48435

In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file...

CVE-2022-48228: Insertion of Sensitive Information into Log File

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362...