CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Published Apr 11, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Timeline

Detection, updates, and resolution for this record.

Apr 11, 2023 · Catalog
Detected
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
Apr 11, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 2, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions.

CISA due date May 2, 2023

CISA KEVCVE-2023-28252
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
cisa.gov
CVE.orgCVE-2023-28252
Official CVE identifier
cve.org
FIRST EPSSCVE-2023-28252
30-day exploitation probability 49.0%
first.org
Metasploit Modulesexploit_windows/local/cve_2023_28252_clfs_driver
Public module reference (good). Module source is not copied into this catalog.
rapid7.com
NIST NVDCVE-2023-28252
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd.nist.gov
Packet Storm Securityhttp://packetstormsecurity.com/files/174668/Windows-Common-Log-File-System-Driver-clfs.sys-Privilege-Escalation.html
Packet Storm link already published on the finding.
packetstormsecurity.com