CVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
KEV RANSOMWAREHIGH 7.8EPSS 49.0%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows Server 2022 · Windows 10 Version 20H2 · Windows 11 version 21H2
- CVSS v3.1 MICROSOFT
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 48.97% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2023-04-11, used in ransomware campaigns
- Published
- 2023-04-11
- Updated
- 2025-10-21
Proof-of-concept exploits (8)
- http://packetstormsecurity.com/files/174668/Windows-Common-Log-File-System-Driver-clfs.sy…
- 726232111/CVE-2023-282520★ · 2023-08-02
- AfanPan/CVE-2025-29824-Exploit21★ · 2025-07-30
- Vulmatch/CVE-2023-282520★ · 2024-06-16
- bkstephen/Compiled-PoC-Binary-For-CVE-2023-282525★ · 2024-01-01
- duck-sec/CVE-2023-28252-Compiled-exe57★ · 2024-01-24
- fortra/CVE-2023-28252184★ · 2023-07-10
- khanmanjo161-hash/Windows-Privilege-Escalation0★ · 2026-09-20