Return to CVE list

CVE-2025-29824

7.8

Critical

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

8 Apr 2025

secure@microsoft.com

Analyzed

View on MITRE Find on GitHub

Description

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

secure@microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29824

af854a3a-2127-422b-91ae-364da2661108

https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-detection-script

af854a3a-2127-422b-91ae-364da2661108

https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-mitigation-script