CVE-2024-49138 Microsoft Windows
Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- Added
- 2024-12-10
- Federal patch deadline
- 2024-12-31
- Ransomware use
- not known