Actively exploited in the wild
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-04-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-29824
HighCVSS 7.8KEVSummary
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain higher privileges on the system, potentially leading to full host compromise.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows Common Log File System Driver
See all- CVE-2026-40407High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32706HighActively exploited
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32701HighActively exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2024-49138HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability. Technical details were not provided in the description.
- CVE-2023-36900High
A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-28252HighActively exploited
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. The flaw enables a local attacker to gain higher privileges on the system.
- CVE-2023-23376HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability.
- CVE-2022-37969HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability. The NVD description provides no technical details beyond the classification.
- CVE-2022-24521HighActively exploited
A privilege elevation vulnerability in the Windows Common Log File System Driver. It is exploited locally by an authenticated user.
- CVE-2021-43226HighActively exploited
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.