CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
48.9%
EPSS
99%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Vendor
Microsoft
Product
Windows
Added to KEV
Apr 11, 2023
Remediation due
May 2, 2023 (US federal deadline)
Ransomware use
Known
Weakness
CWE-122
EPSS
48.9% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded