High · published September 13, 2022
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.1th percentile for exploit probability.
⚡ A crafty line in the Windows Common Log File System could let an attacker boost their privileges, bypassing security measures like they’re merely suggestions! 🔥 Think of it as a clerk who can suddenly access the manager's office without the keycard—gaining full control over all the confidential files! With this vulnerability, an attacker can escalate their privileges to execute arbitrary code, potentially taking over your entire system. That could mean accessing sensitive data, installing unapproved software, or even locking you out altogether! This is absolutely devastating for user security and impacts the trust we place in our systems.
Think of it as a clerk who can suddenly access the manager's office without the keycard—gaining full control over all the confidential files! This elevation of privilege vulnerability in the Windows Common Log File System Driver allows attackers to run their own code with elevated permissions, exploiting a flaw in how the driver handles requests.
With this vulnerability, an attacker can escalate their privileges to execute arbitrary code, potentially taking over your entire system. That could mean accessing sensitive data, installing unapproved software, or even locking you out altogether! This is absolutely devastating for user security and impacts the trust we place in our systems. To mitigate this risk, update your Windows system to the latest version immediately. Ensure you regularly check for security patches and consider implementing stricter user access controls to limit potential exploitation. You’ve got this! Stay proactive and patch those systems—your digital fortress awaits! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19444 | 10.0.10240.19444 |
| microsoft/windows_10_1607 | < 10.0.14393.5356 | 10.0.14393.5356 |
| microsoft/windows_10_1809 | < 10.0.17763.3406 | 10.0.17763.3406 |
| microsoft/windows_10_20h2 | < 10.0.19042.2006 | 10.0.19042.2006 |
| microsoft/windows_10_21h1 | < 10.0.19043.2006 | 10.0.19043.2006 |
| microsoft/windows_10_21h2 | < 10.0.19044.2006 | 10.0.19044.2006 |
| microsoft/windows_11_21h2 | < 10.0.22000.978 | 10.0.22000.978 |
| microsoft/windows_7 | all versions | — |
| microsoft/windows_8.1 | all versions | — |
| microsoft/windows_rt_8.1 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.5356 | 10.0.14393.5356 |
| microsoft/windows_server_2019 | < 10.0.17763.3406 | 10.0.17763.3406 |
| microsoft/windows_server_2022 | < 10.0.20348.1006 | 10.0.20348.1006 |