Actively exploited in the wild
Microsoft Windows Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-10-06. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2021-43226
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Risk Assessment
Risk of unauthorized users gaining control over the system, potentially leading to full system compromise.
Recommendation
Apply security updates provided by the Windows vendor immediately.
Original NVD description (English source)
Windows Common Log File System Driver Elevation of Privilege Vulnerability