CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-12-15
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2021-43226) Analysis and Mitigation Guide
[Affected Scope] All Windows systems utilizing the Common Log File System (CLFS.sys) driver, including Windows 10, 11, and Windows Server editions.
[Impact] A local attacker can execute arbitrary code in kernel mode via a specially crafted application, leading to complete SYSTEM privilege escalation.
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor for unauthorized local process executions and anomalous CLFS log creations.