CVE-2023-23376

An unpatched privilege escalation flaw in the Windows CLFS driver was actively exploited in the wild to enable ransomware attacks.

The CLFS driver vulnerability allowed attackers to escalate privileges on Windows systems, a critical failure for DIB organizations relying on Microsoft infrastructure. Because it remained unpatched long enough to be exploited in the wild, it demonstrates severe negligence and exposes systems to ransomware and data breaches. DIBs must enforce strict patch management and monitor for active exploitation of known CVEs.

Shame score — A known, unpatched vulnerability was actively exploited in the wild to facilitate ransomware attacks, indicating severe negligence and a failure to protect critical infrastructure.