Microsoft Windows Common Log File System Driver特权提升漏洞(CVE-2025-29824)

详细信息

漏洞类型

资源管理错误

漏洞描述

Microsoft Windows通用日志文件系统（CLFS）驱动程序包含释放后使用漏洞，允许授权攻击者在本地提升权限。

修复建议

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29824

参考链接

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29824

  CVE · vendor-advisory

• https://nvd.nist.gov/vuln/detail/CVE-2025-29824

  CNNVD

• https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-detection-script

  NVD · Exploit · Third Party Advisory

• https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-mitigation-script

  NVD · Exploit · Third Party Advisory

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-29824

  NVD · US Government Resource