CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-245217.8/HIGHEPSS 7.1%CISA KEV
2022-04-15

Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2022-24521) Technical Analysis and Mitigation Guide

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server 2008 through 2022.

[Impact] Local authenticated attackers can execute arbitrary code with kernel-level privileges (SYSTEM), leading to complete system compromise.

[Mitigation] Immediately apply the Microsoft official cumulative security updates and monitor for anomalous CLFS log creation and driver activities.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse