CVE-2024-49138

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver (affected versions not specified)

Description The vulnerability is an elevation-of-privilege issue in the Windows Common Log File System Driver. It allows attackers to gain SYSTEM privileges on Windows devices. The vulnerability has been actively exploited in the wild. Microsoft has released a patch to fix the issue. The vulnerability is a heap-based buffer overflow in the Windows Common Log File System driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, it is recommended to apply the patch released by Microsoft as part of their December 2024 Patch Tuesday update. Ensure your systems are updated now to protect against potential exploitation.