CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-04-11
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-28252) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the clfs.sys driver
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, fully compromising the host and disabling security controls
[Mitigation] Apply the Microsoft April 2023 security updates immediately, or restrict .blf file creation permissions as a temporary workaround