CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-60709

Technical details (affected product/version, root cause, impact, exploit specifics) are not publicly provided in the given documents for CVE-2025-60709. Monitor for updates from Microsoft; no additional vulnerability specifics are available here.

CVE-2025-60709

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

EUVD-2025-93437

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Windows License Manager Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

Windows License Manager Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-11891 Shelf Planner <= 2.8.1 - Unauthenticated Information Exposure via Log Files

The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files...

CVE-2025-11891 Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files

The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.0 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A buffer error...

CVE-2025-12940: Insertion of Sensitive Information into Log File

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

PT-2025-46503

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description An issue exists in Windows License Manager that allows an authorized attacker to disclose information locally through the insertion of sensitive information into a log file...

PT-2025-46472

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description An out-of-bounds read issue exists in the Windows Common Log File System CLFS driver. Exploitation of this issue can allow an authorized attacker to elevate privileges...

CVE-2025-62208: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-62209: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2025-60709: Out-of-bounds Read

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, read local files, cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

KB5068861: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (November 2025)

The remote Windows host is missing security update 5068861 or hotpatch 5068966. It is, therefore, affected by multiple vulnerabilities - Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. CVE-2025-62208,...

GO-2025-4000 Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd

Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd...

CVE-2025-11008

The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as oth...