CVE-2022-37969—Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Vulnerability Name

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Description

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37969
• https://nvd.nist.gov/vuln/detail/CVE-2022-37969

Related News Articles

• Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityApril 9, 2025
• Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS VulnerabilityApril 9, 2025
• Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityDecember 11, 2024
• CISA says BianLian ransomware now focuses only on data theftNovember 21, 2024

Related Weaknesses

• CWE-20
• CWE-787