CVE Watch—

CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CVSS

—

Sin CVSS

EPSS

49.0%

p99

KEV

SÍ

11 abr 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

49.0%EPSS · 30 días49.0%

2026-08-032026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Windows

Vulnerabilidad

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Añadido a KEV

11 abr 2023

Remediar antes de

2 may 2023

Uso conocido en ransomware

Sí

Descripción resumida

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Acción requerida

Apply updates per vendor instructions.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252; https://nvd.nist.gov/vuln/detail/CVE-2023-28252

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-322024.3 MED

99.2%

KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability18d CVE-2026-208055.5 MED

91.8%

KEV—78Microsoft Windows Information Disclosure Vulnerability33d CVE-2025-266337.0 ALT

98.1%

KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability27d CVE-2024-490398.8 ALT

96.3%

KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability28d CVE-2024-434618.8 ALT

98.9%

KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability22d CVE-2024-382175.4 MED

95.3%

KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability22d