CVE-2022-24521: high-severity vulnerability in Microsoft Windows 10 Version 1507

A flaw in Windows' Common Log File System driver allows an attacker with local access to run malicious code with elevated privileges. This bypasses security protections and gives the attacker full control over the system.

Buffer overflow (CWE-787) in the CLFS driver allows local privilege escalation when a user interacts with specially crafted log file structures. An attacker with local access can trigger out-of-bounds memory writes to execute arbitrary code in kernel context.