返回 CVE 浏览器

CVE-2025-29824

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-04-08

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Affected Platforms (CPE)

💻

Microsoft

Windows 10 1507

< 10.0.10240.20978

💻

Microsoft

Windows 10 1607

< 10.0.14393.7969

💻

Microsoft

Windows 10 1809

< 10.0.17763.7136

💻

Microsoft

Windows 10 21h2

< 10.0.19044.5737

References & Advisories

🔗 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29824

🔗 https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-detection-script

🔗 https://www.vicarius.io/vsociety/posts/cve-2025-29824-windows-common-log-file-system-driver-elevation-of-privilege-vulnerability-mitigation-script

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-29824

相關資安分析文章

周度网络安全新闻：2026 年 7 月 27 日

本周重大安全周报聚焦于 Check Point SmartConsole CVE-2026-16232 验证绕过之在野利用、PAN-OS GlobalProtect 漏洞与 Qilin 勒索软件侵袭、俄罗斯 LAUNDRY BEAR 对 Zimbra 进行之国家级电子邮件间谍活动，以及 Windchill 与 FakeGit 恶意 Repositories 威胁趋势。

全球网络威胁情报摘要：2026 年 7 月 24 日

本期情报聚焦于 Check Point CVE-2026-16232 SmartConsole 控制平面身份验证绕过之主动利用、俄罗斯 LAUNDRY BEAR 利用 Zimbra 漏洞进行电子邮件间谍活动，以及假冒 Claude Desktop 的恶意广告攻击与 Chaos 勒索软件运作动态。

全球网络威胁情报摘要：2026 年 7 月 23 日

本期情报重点包含 CISA 将 Langflow CVE-2026-0770 远程代码执行漏洞列入 KEV 已知利用目录、Windmill CVE-2026-29059 未经身份验证路径穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持续追踪与防御建议。

相关漏洞威胁

CVE-2026-579174.8

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing th...

CVE-2026-106816.5

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permiss...

CVE-2026-645239.8

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit ha...

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascam_di...