CVE-2023-35299
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A vulnerability in the Windows Common Log File System driver allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
Risk Assessment
The risk to the organization is the potential for an attacker to gain full control over the system, which could lead to serious security breaches.
Recommendation
It is recommended to update the operating system to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows Common Log File System Driver
See all- CVE-2026-40407High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2023-36900High
A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-23376HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability.
- CVE-2021-43226HighActively exploited
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-36955HighActively exploited
Elevation of privilege vulnerability in Windows Common Log File System Driver. Could be exploited to gain elevated privileges.
- CVE-2026-62728High
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Common Log File System Driver. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-50697High
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-44809High
The Windows Common Log File System Driver contains a Use After Free vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-20820High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2021-38633High
Vulnerability in Windows Common Log File System Driver allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Original NVD description (English source)
Windows Common Log File System Driver Elevation of Privilege Vulnerability