CVE-2025-32706: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Windows' log file system driver allows someone with user access to gain administrative privileges on the computer. This happens because the driver doesn't properly check the data it receives.
Improper input validation in the Windows Common Log File System Driver (CLFS) permits an authenticated local attacker to achieve privilege escalation through crafted input. The vulnerability requires local access and valid user credentials; successful exploitation grants elevated (administrative) privileges.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.