CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2023-11-14
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-36424) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets