microsoft windows-server-2012 CVE-2025-29824 vulnerability in Microsoft Products
Published on April 8, 2025

product logo product logo
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

The following remediation steps are recommended / required by April 29, 2025: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Vulnerability Analysis


Products Associated with CVE-2025-29824

You can be notified by stack.watch whenever vulnerabilities like CVE-2025-29824 are published in these products:

 
 
 
 
 
 
 
 
 
 

What versions are vulnerable to CVE-2025-29824?