CVE-2025-29824

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Affected

Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1809 · Windows 10 Version 21H2 · Windows 10 Version 22H2 · Windows 11 version 22H2

CVSS v3.1 MICROSOFT

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

13.90% chance of exploitation in the next 30 days, 97th percentile

CISA KEV

added 2025-04-08, used in ransomware campaigns

Published

2025-04-08

Updated

2026-08-10

Proof-of-concept exploits (4)

• AfanPan/CVE-2025-29824-Exploit21★ · 2025-07-30
• AntonyNRM/vulnerable-flask-app0★ · 2025-04-29
• encrypter15/CVE-2025-2982430★ · 2025-05-14
• uname1able/CVE-2025-298241★ · 2026-03-17

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29824
• https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driv…
• https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driv…

References

• CVE Record
• NVD entry

Related

• CVE-2023-28252
• CVE-2025-24983
• CVE-2025-30400
• CVE-2025-47181
• CVE-2025-50165
• CVE-2022-24481