CVE-2022-24521—Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Vulnerability Name

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Description

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

• https://nvd.nist.gov/vuln/detail/CVE-2022-24521

Related News Articles

• Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityApril 9, 2025
• Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS VulnerabilityApril 9, 2025
• Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityDecember 11, 2024

Related Weaknesses

• CWE-787
• CWE-1285