CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-11-14
Windows Cloud Files Mini Filter Driver (cldflt.sys) Elevation of Privilege Vulnerability (CVE-2023-36036) Analysis & Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server operating systems utilizing the Cloud Files Mini Filter Driver (cldflt.sys)
[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, achieving full SYSTEM privileges (actively exploited in the wild)
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the affected driver service as a temporary workaround