Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow ยท updates https://pwn.watch/i/microsoft-windows-cve-2024-49138 Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges. Added to the CISA KEV catalog on 2024-12-10. en Tue, 10 Dec 2024 00:00:00 GMT Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow: CVE-2024-49138 published https://pwn.watch/i/microsoft-windows-cve-2024-49138 https://pwn.watch/i/microsoft-windows-cve-2024-49138#2024-12-10-56314b12 Tue, 10 Dec 2024 00:00:00 GMT high <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-49138">Source</a></p> Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow: CISA added CVE-2024-49138 to the KEV catalog (federal deadline 2024-12-31) https://pwn.watch/i/microsoft-windows-cve-2024-49138 https://pwn.watch/i/microsoft-windows-cve-2024-49138#2024-12-10-41d5a296 Tue, 10 Dec 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>