Windows Common Log File System Driver Elevation of Privilege Vulnerability
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows' Common Log File System Driver allows an attacker with local access to gain higher-level system privileges, potentially taking full control of the computer. This is dangerous because it lets a regular user become an administrator without authorization.
The vulnerability exists in the Windows Common Log File System Driver and allows local privilege escalation through improper handling of kernel-mode operations. An authenticated attacker can exploit this to execute arbitrary code with SYSTEM privileges, requiring local access but no special user interaction.