High · published February 15, 2023
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 95.9th percentile for exploit probability.
⚡ An unpatched bug in the Windows Common Log File System can let an attacker elevate privileges with just a few malicious moves! 😱 Think of it like a sneaky delivery person who manages to slip into a secure building by pretending they have a higher authority than they do — once in, they could take control of sensitive packages and information! 📦 If exploited, this vulnerability allows attackers to gain elevated privileges, meaning they could execute arbitrary code with higher access rights. This could lead to unauthorized access to sensitive data, system modifications, or even complete control over affected systems — absolutely devastating! 🔥
Think of it like a sneaky delivery person who manages to slip into a secure building by pretending they have a higher authority than they do — once in, they could take control of sensitive packages and information! 📦 This elevation of privilege vulnerability in the Windows Common Log File System Driver allows an attacker to execute arbitrary code due to improper handling of objects in memory. It does so by tricking the system into granting higher permissions than intended.
If exploited, this vulnerability allows attackers to gain elevated privileges, meaning they could execute arbitrary code with higher access rights. This could lead to unauthorized access to sensitive data, system modifications, or even complete control over affected systems — absolutely devastating! 🔥 Update Windows to the latest version immediately to patch this vulnerability. Ensure that your security settings are configured correctly and consider running regular scans to check for any unauthorized access. Don't delay — the risks are too high! 🛡️ You've got this! Follow these steps and you'll be a hero in securing your systems! 💪😊
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19747 | 10.0.10240.19747 |
| microsoft/windows_10_1607 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_10_1809 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_10_20h2 | < 10.0.19042.2604 | 10.0.19042.2604 |
| microsoft/windows_10_21h2 | < 10.0.19044.2604 | 10.0.19044.2604 |
| microsoft/windows_10_22h2 | < 10.0.19045.2604 | 10.0.19045.2604 |
| microsoft/windows_11_21h2 | < 10.0.22000.1574 | 10.0.22000.1574 |
| microsoft/windows_11_22h2 | < 10.0.22621.1265 | 10.0.22621.1265 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.5717 | 10.0.14393.5717 |
| microsoft/windows_server_2019 | < 10.0.17763.4010 | 10.0.17763.4010 |
| microsoft/windows_server_2022 | < 10.0.20348.1540 | 10.0.20348.1540 |