CVE-2023-28252
KEV RANSOMWAREHIGH 7.8EPSS 49.0%
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 48.97% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2023-04-11, used in ransomware campaigns
- Published
- 2023-04-11
- Updated
- 2025-10-21
Proof-of-concept exploits (8)
- http://packetstormsecurity.com/files/174668/Windows-Common-Log-File-System-Driver-clfs.sy…
- 726232111/CVE-2023-282520★ · 2023-08-02
- AfanPan/CVE-2025-29824-Exploit21★ · 2025-07-30
- Danasuley/CVE-2023-28252-0★ · 2023-11-13
- Vulmatch/CVE-2023-282520★ · 2024-06-16
- bkstephen/Compiled-PoC-Binary-For-CVE-2023-282524★ · 2024-01-01
- duck-sec/CVE-2023-28252-Compiled-exe57★ · 2024-01-24
- fortra/CVE-2023-28252183★ · 2023-07-10