CVE-2022-37969KEV · OVERDUECWE-787

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

High · published September 13, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.1th percentile for exploit probability.

1480
days past CISA
deadline
CVSS v3.1
7.8
EPSS
28%
Percentile
98.1
In the wild
Confirmed
What it is

⚡ A crafty line in the Windows Common Log File System could let an attacker boost their privileges, bypassing security measures like they’re merely suggestions! 🔥 Think of it as a clerk who can suddenly access the manager's office without the keycard—gaining full control over all the confidential files! With this vulnerability, an attacker can escalate their privileges to execute arbitrary code, potentially taking over your entire system. That could mean accessing sensitive data, installing unapproved software, or even locking you out altogether! This is absolutely devastating for user security and impacts the trust we place in our systems.

Put simply

Think of it as a clerk who can suddenly access the manager's office without the keycard—gaining full control over all the confidential files! This elevation of privilege vulnerability in the Windows Common Log File System Driver allows attackers to run their own code with elevated permissions, exploiting a flaw in how the driver handles requests.

What to do

With this vulnerability, an attacker can escalate their privileges to execute arbitrary code, potentially taking over your entire system. That could mean accessing sensitive data, installing unapproved software, or even locking you out altogether! This is absolutely devastating for user security and impacts the trust we place in our systems. To mitigate this risk, update your Windows system to the latest version immediately. Ensure you regularly check for security patches and consider implementing stricter user access controls to limit potential exploitation. You’ve got this! Stay proactive and patch those systems—your digital fortress awaits! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.28275 · 98.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-09-13T23:15Z
KEV added
2022-09-14 · due 2022-10-05
Affected products (17)
ProductVersionsFixed in
microsoft/windows_10_1507< 10.0.10240.1944410.0.10240.19444
microsoft/windows_10_1607< 10.0.14393.535610.0.14393.5356
microsoft/windows_10_1809< 10.0.17763.340610.0.17763.3406
microsoft/windows_10_20h2< 10.0.19042.200610.0.19042.2006
microsoft/windows_10_21h1< 10.0.19043.200610.0.19043.2006
microsoft/windows_10_21h2< 10.0.19044.200610.0.19044.2006
microsoft/windows_11_21h2< 10.0.22000.97810.0.22000.978
microsoft/windows_7all versions—
microsoft/windows_8.1all versions—
microsoft/windows_rt_8.1all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016< 10.0.14393.535610.0.14393.5356
microsoft/windows_server_2019< 10.0.17763.340610.0.17763.3406
microsoft/windows_server_2022< 10.0.20348.100610.0.20348.1006
References (3)
EPSS history
Timeline
  • 14 SEP 00:00Z
    Added to CISA KEV — remediate by Oct 5
    kev
  • 13 SEP 18:42Z
    Windows Common Log File System Driver Elevation of Privilege Vulnerability
    cvelistv5