Actively exploited in the wild

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2023-02-14. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2023-23376

HighCVSS 7.8KEV

Published: 14/02/2023(UTC)Updated: 05/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

10.85%

95th percentile - higher than 95% of all known CVEs

Windows Common Log File System Driver Elevation of Privilege Vulnerability.

The risk includes the possibility of an attacker gaining higher privileges, which could lead to full control over the system.

It is recommended to apply Microsoft patches and restrict system access to trusted users only.

Original NVD description (English source)

Windows Common Log File System Driver Elevation of Privilege Vulnerability