CVE-2023-36713 Windows Common Log File System Driver Information Disclosure Vulnerability

...

Windows Common Log File System Driver (clfs.sys) Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Common Log File System Driver clfs.sys Elevation of Privilege Vulnerability', 'Description' = %q A privilege escalation vulnerability...

CVE-2023-38144 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-38144 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-38143

Technical details for CVE-2023-38143 are not publicly provided in the supplied documents. Affected product/version, root cause, exploitability, and remediation are not specified here; monitor for official disclosures and vendor advisory updates.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver Security Vulnerability

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

PT-2023-5139 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer out-of-bounds operation in memory when handling BLF log files, which can allow an attacker to elevate their privileges. This i...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-36900 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

PT-2023-4377 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allows an...

CVE-2023-35299

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-35299 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-35299 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

PT-2023-3823 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system...

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to be outdone, Apple has released a set of important updates addressing two zero-day...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2023-28252

CVE-2023-28252 – Windows CLFS driver local privilege escalation : The vulnerability stems from CLFS.sys handling of file blocks in memory (m_rgBlocks) and associated metadata, enabling an out-of-bounds access that lets an unprivileged user hijack the SYSTEM token. Public PoCs and in-the-wild acti...