Skip to content
COOEY

EXPOSURES › CVE-2022-24521

CVE-2022-24521

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-04-13 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-24521 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 ransomwareexploited-in-wildunpatchedrce

A Microsoft Windows driver vulnerability allows privilege escalation and is actively exploited in ransomware attacks, impacting CMMC compliance for DIB organizations using vulnerable systems.

The Microsoft Windows CLFS driver contains a privilege escalation vulnerability (CVE-2022-24521) that is currently being exploited. This allows attackers to gain elevated privileges on affected systems, potentially leading to data breaches and ransomware infections. DIB organizations must immediately patch vulnerable systems to maintain CMMC compliance and mitigate risk.

Shame score — A critical, actively exploited vulnerability in a core Windows component demonstrates a significant failure in Microsoft's security practices and poses a substantial risk to DIB partners.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized