CVE Catalog
CVE-2026-62728
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Common Log File System Driver. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit this to alter system state between check and use, potentially leading to privilege escalation or data corruption.
Recommendation
Install the latest Windows security updates. Restrict access to the CLFS file system to trusted users only.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.