Windows Common Log File System Driver vulnerabilities
24 known CVE vulnerabilities in Windows Common Log File System Driver, translated and rated.
- CVE-2026-85870High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85868High
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85355High
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-40407High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32706HighActively exploited
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-32701HighActively exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-29824HighActively exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2024-49138HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability. Technical details were not provided in the description.
- CVE-2023-36900High
A vulnerability in the Windows Common Log File System Driver allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges in the system.
- CVE-2023-28252HighActively exploited
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. The flaw enables a local attacker to gain higher privileges on the system.
- CVE-2023-23376HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability.
- CVE-2022-37969HighActively exploited
Windows Common Log File System Driver Elevation of Privilege Vulnerability. The NVD description provides no technical details beyond the classification.
- CVE-2022-24521HighActively exploited
A privilege elevation vulnerability in the Windows Common Log File System Driver. It is exploited locally by an authenticated user.
- CVE-2021-43226HighActively exploited
A vulnerability in the Windows Common Log File System (CLFS) driver allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-36955HighActively exploited
Elevation of privilege vulnerability in Windows Common Log File System Driver. Could be exploited to gain elevated privileges.
- CVE-2019-1214HighActively exploited
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, known as 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
- CVE-2026-62728High
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Common Log File System Driver. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-50697High
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-44809High
The Windows Common Log File System Driver contains a Use After Free vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-20820High
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2025-62470High
A heap-based buffer overflow in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- CVE-2023-35299High
A vulnerability in the Windows Common Log File System driver allows for privilege escalation. An attacker can exploit this flaw to gain elevated privileges on the system.
- CVE-2021-38633High
Vulnerability in Windows Common Log File System Driver allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2021-36963High
Vulnerability in Windows Common Log File System Driver allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

