CVE Watch—

CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CVSS

—

Sin CVSS

EPSS

49.0%

p99

KEV

SÍ

11 abr 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

49.0%EPSS · 30 días49.0%

2026-09-182026-10-15

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Añadido a KEV

11 abr 2023

Remediar antes de

2 may 2023

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252; https://nvd.nist.gov/vuln/detail/CVE-2023-28252

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-969518.8 ALT

74.0%

KEV—72Microsoft Windows Command Injection Vulnerability7h CVE-2026-858807.8 ALT

89.3%

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d CVE-2026-819637.8 ALT

31.9%

KEV—60Microsoft Windows Link Following Vulnerability38d CVE-2026-322024.3 MED

92.0%

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

94.4%

KEV—78Microsoft Windows Information Disclosure Vulnerability78d CVE-2025-622217.8 ALT

84.4%

KEV—75Microsoft Windows Use After Free Vulnerability21d