CVE-2023-28252

CVE-2023-28252 is a critical Elevation of Privilege vulnerability found in the Windows Common Log File System (CLFS) driver. This flaw was discovered by Kaspersky researchers while preventing attacks on users, marking it as a zero-day vulnerability. The vulnerability presents a significant risk with a QDS score of 95 and a high CVSS score of 7.8, indicating its potential severity if exploited. The vulnerability was identified amidst a series of zero-day vulnerabilities found in Windows, with CVE-2023-28252 standing out due to its similarity with another exploit, CVE-2023-23376. This suggests a pattern or possible related origin between these exploits, increasing the urgency for addressing this issue. Microsoft has acknowledged the vulnerability and assigned it the identifier 'CVE-2023-28252.' In response to the discovery, Microsoft has published an advisory about the vulnerability on their security update guide. It is crucial for all users and administrators to stay informed about the latest updates and patches released by Microsoft to mitigate this vulnerability. Given the high-risk scores associated with this exploit, immediate attention and action are required to prevent potential system compromise.