Elevation of Privilege Vulnerability in Windows Common Log File System Driver
CVE-2025-30385

7.8HIGH

What is CVE-2025-30385?

An elevation of privilege vulnerability has been identified in the Windows Common Log File System Driver. This issue arises from a use-after-free condition, which could allow an authorized attacker to elevate their privileges locally on the affected system. Attackers exploiting this vulnerability could gain unauthorized access to sensitive information or execute arbitrary code with escalated permissions. It is crucial for users and administrators to apply the relevant updates and patches provided by Microsoft to mitigate this risk.

Affected Version(s)

Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21014

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8066

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7314

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30385 : Elevation of Privilege Vulnerability in Windows Common Log File System Driver