PULSEUnderground Intel

LIVE63signals / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

CVE Watch—

CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

49.0%

p99

KEV

YES

Apr 11, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

49.0%EPSS · 30 days49.0%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Added to KEV

Apr 11, 2023

Remediate by

May 2, 2023

Known ransomware use

Yes

Summary description

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252; https://nvd.nist.gov/vuln/detail/CVE-2023-28252

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969518.8 HIG

KEV—72Microsoft Windows Command Injection Vulnerability10h CVE-2026-858807.8 HIG

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d CVE-2026-819637.8 HIG

KEV—60Microsoft Windows Link Following Vulnerability37d CVE-2026-322024.3 MED

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability78d CVE-2025-622217.8 HIG

KEV—75Microsoft Windows Use After Free Vulnerability21d