CVE-2023-28252
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
CVSS
—
Sem CVSS
EPSS
48.9%
p99
KEV
SIM
11 de abr. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
48.9%EPSS · 30 dias49.0%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Adicionado ao KEV
11 de abr. de 2023
Corrigir até
2 de mai. de 2023
Uso conhecido em ransomware
Sim
Descrição resumida
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
Ação necessária
Apply updates per vendor instructions.
Notas
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252; https://nvd.nist.gov/vuln/detail/CVE-2023-28252
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7dCVE-2026-858807.8 ALT33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42dCVE-2026-819637.8 ALT33.7%
KEV—60Microsoft Windows Link Following Vulnerability58dCVE-2026-322024.3 MÉD99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10dCVE-2026-208055.5 MÉD94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98dCVE-2025-622217.8 ALT84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d