CVE-2023-36036: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows Cloud Files Mini Filter Driver allows an attacker with local access to run code with higher privileges than their account normally permits. This is dangerous because it can let an attacker take full control of a computer.
A privilege escalation vulnerability exists in the Windows Cloud Files Mini Filter Driver (CWE-122: heap buffer overflow) that can be exploited by a local authenticated attacker to execute arbitrary code with SYSTEM privileges. The vulnerability requires local code execution context but does not require additional user interaction.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.