CVE-2021-43226: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Windows' Common Log File System Driver allows a local attacker to gain higher privileges on the system. An authenticated user can exploit this to run malicious code with elevated permissions.
A privilege escalation vulnerability in the CLFS driver can be exploited by a local attacker with user-level access to execute arbitrary code with kernel privileges. The attack requires local code execution as a prerequisite and results in complete system compromise via kernel-level access.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.