Microsoft Windows Server 2012
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*
A vulnerability allowing out-of-bounds read has been identified in the Windows Common Log File System Driver. This issue allows an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows products, including various versions of Windows Server, Windows 10, and Windows 11.
Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.
Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5068781, KB5068864, KB5068905, KB5068906, KB5068907, KB5068909, KB5068779, KB5068840, KB5068861, KB5068966, and KB5068785.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.