Windows CLFS Driver Privilege EscalationThis vulnerability targets the Common Log File System (CLFS) and allows attackers to escalate privileges and potentially fully compromise an organization’s Windows systems. In April 2023, Microsoft released a patch for this vulnerability and the CNA CVE-2023-28252 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28252) was assigned.
Affects version:— Windows 11 21H2 (clfs.sys version 10.0.22000.1574);
— Windows 11 22H2;
— Windows 10 21H2;
— Windows 10 22H2;
— Windows Server 2022.
Research:
https://www.coresecurity.com/core-labs/articles/analysis-cve-2023-28252-clfs-vulnerabilityExploit:
https://github.com/duck-sec/CVE-2023-28252-Compiled-exe