CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24521

CVE-2022-24521 is a Windows Windows Common Log File System Driver Privilege Escalation vulnerability. The CVE entry reports an elevation-of-privilege flaw in the CLFS driver; CVSS scores shown include a 2.0/2.0 base (MEDIUM) on NVD and a 3.1-based HIGH score from Microsoft, both indicating local ...

CVE-2022-24481

CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....

CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2021-28505

creationtimestamp| type| source ---|---|--- 2022-04-15 00:19:29+00:00| seen| https://t.me/cibsecurity/40817...

CVE-2021-40425

creationtimestamp| type| source ---|---|--- 2022-04-15 00:19:17+00:00| seen| https://t.me/cibsecurity/40808...

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: cbeek-r7 at March 21, 2025 12:29pm UTC reported: RansomHub affiliate observed in abusing this vulnerability including 3 files that were weaponizing this vulnerability:...

CVE-2014-9118

creationtimestamp| type| source ---|---|--- 2022-04-14 15:17:01+00:00| exploited| https://t.me/NeKaspersky/2117 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-11-30 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-30 2024-12-19...

CVE-2022-24816

creationtimestamp| type| source ---|---|--- 2022-04-14 00:18:15+00:00| seen| https://t.me/cibsecurity/40743 2024-06-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-11-13...

CVE-2022-28052

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution...

CVE-2022-28052

Directory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function store in Roothub 2.6.0 allows remote attackers with low privlege to arbitrarily upload files via /common/upload API, which could lead to remote arbitrary code execution...

Weekly Threat Digest: 4 – 10 April 2022

For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 438 3 3 53 16 54 The second week of April 2022 witnessed the discovery of 438 vulnerabilities out of which 3 gaine...

CVE-2022-24411

creationtimestamp| type| source ---|---|--- 2022-04-12 22:17:15+00:00| seen| https://t.me/cibsecurity/40673...

CVE-2022-27480

creationtimestamp| type| source ---|---|--- 2022-04-12 12:22:59+00:00| seen| https://t.me/cibsecurity/40585...

Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 (KB5012681)

Description of the security update for Skype for Business Lync Server 2013: April 12, 2022 KB5012681 Summary This security update resolves an information disclosure vulnerability in Microsoft Lync Server. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposure...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-26098

creationtimestamp| type| source ---|---|--- 2022-04-12 00:22:27+00:00| seen| https://t.me/cibsecurity/40529...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-24521)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...