CVE-2023-23376: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Windows' logging system driver allows a user with basic access to gain higher privileges and take full control of the computer. This is dangerous because it lets attackers bypass security restrictions.
A buffer overflow vulnerability in the Common Log File System (CLFS) driver enables local privilege escalation through crafted I/O control requests. An authenticated attacker can trigger memory corruption to execute code with kernel privileges, bypassing normal access controls.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.