CVE-2023-35299
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability in the Windows Common Log File System driver allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
Risk Assessment
The risk to the organization is the potential for an attacker to gain full control over the system, which could lead to serious security breaches.
Recommendation
It is recommended to update the operating system to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows Common Log File System Driver
See all- CVE-2026-85870High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85868High
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85355High
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70233High
Heap-based buffer overflow in the Windows Common Log File System Driver. An authorized attacker can elevate privileges locally.
- CVE-2026-40407High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32706HighActively exploited
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32701HighActively exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-29824HighActively exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2024-49138HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability. Technical details were not provided in the description.
- CVE-2023-36900High
A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
Original NVD description (English source)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS