Описание
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-32706
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32706
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32706
- https://www.vicarius.io/vsociety/posts/cve-2025-32706-detection-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver
- https://www.vicarius.io/vsociety/posts/cve-2025-32706-mitigation-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver
Связанные уязвимости
CVSS3: 7.8
nvd
около 1 года назад
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS3: 7.8
msrc
около 1 года назад
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS3: 7.8
fstec
около 1 года назад
Уязвимость драйвера Windows Common Log File System (CLFS) операционных систем Windows, позволяющая нарушителю повысить свои привилегии до уровня SYSTEM