High · published September 15, 2021
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 90.6th percentile for exploit probability.
🚨 A single misconfiguration in the Windows Common Log File System Driver could let an attacker gain elevated privileges! 🔥 Think of it like a security guard at a concert who mistakenly lets someone backstage without a proper pass — suddenly, they can access restricted areas! An attacker could exploit this vulnerability to gain elevated access, potentially leading to unauthorized actions like installing malicious software or accessing sensitive data. This could be absolutely devastating for system integrity and user privacy!
Think of it like a security guard at a concert who mistakenly lets someone backstage without a proper pass — suddenly, they can access restricted areas! This elevation of privilege vulnerability arises from improper handling of objects in memory by the Common Log File System Driver, allowing attackers to execute arbitrary code with elevated privileges.
An attacker could exploit this vulnerability to gain elevated access, potentially leading to unauthorized actions like installing malicious software or accessing sensitive data. This could be absolutely devastating for system integrity and user privacy! To mitigate this risk, make sure to apply the latest security patches provided by Microsoft. Regularly update your systems and consider implementing stricter access controls to minimize exposure. Don't wait — this is a high-risk situation! You've got this! Stay vigilant and follow these steps to secure your systems! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19060 | 10.0.10240.19060 |
| microsoft/windows_10_1607 | < 10.0.14393.4651 | 10.0.14393.4651 |
| microsoft/windows_10_1809 | < 10.0.17763.2183 | 10.0.17763.2183 |
| microsoft/windows_10_1909 | < 10.0.18363.1801 | 10.0.18363.1801 |
| microsoft/windows_10_2004 | < 10.0.19041.1237 | 10.0.19041.1237 |
| microsoft/windows_10_20h2 | < 10.0.19042.1237 | 10.0.19042.1237 |
| microsoft/windows_10_21h1 | < 10.0.19043.1237 | 10.0.19043.1237 |
| microsoft/windows_7 | all versions | — |
| microsoft/windows_8.1 | all versions | — |
| microsoft/windows_rt_8.1 | all versions | — |
| microsoft/windows_server_2004 | < 10.0.19041.1237 | 10.0.19041.1237 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.4651 | 10.0.14393.4651 |
| microsoft/windows_server_2019 | < 10.0.17763.2183 | 10.0.17763.2183 |
| microsoft/windows_server_2022 | < 10.0.20348.230 | 10.0.20348.230 |
| microsoft/windows_server_20h2 | < 10.0.19042.1237 | 10.0.19042.1237 |