CVE-2024-49138

Microsoft Windows CLFS driver heap-based buffer overflow allows local privilege escalation.

A heap-based buffer overflow in the Windows CLFS driver enables local attackers to escalate privileges, posing a significant risk to DIB organizations relying on Windows systems for sensitive data. While not a remote exploit, the local privilege escalation capability means compromised endpoints can access sensitive data, potentially leading to data breaches and compliance violations. DIB organizations must ensure all Windows systems are patched immediately to mitigate this vulnerability.

Shame score — A local privilege escalation vulnerability in a widely-used Windows component that requires user interaction to exploit.