Every CVE Search/ Get API key

CVE-2025-29824

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8 HighIn KEVPublic exploit

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

19.3%Up 0.1 points since Apr 9, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Record
CVE-2025-29824
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2025-10122 7.8

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Record
EUVD-2025-10122
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-74mq-6c57-fxpx 7.8

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate...

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Record
GHSA-74mq-6c57-fxpx
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
CISA KEV No score

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.

Record
CVE-2025-29824
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

Record
CVE-2025-29824
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02

Affected products

Show 24 moreShow less

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubencrypter15/CVE-2025-298242025-05-14
PoC in GitHubAfanPan/CVE-2025-29824-Exploit2025-07-30
PoC in GitHubzmkeh/CVE-2025-29824-CLFS-Local-privilege-escalation2025-10-27
PoC in GitHubuname1able/CVE-2025-298242026-03-17

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-29824 is a high vulnerability (CVSS 7.8) in Microsoft Windows, published April 8, 2025. CISA lists it as known to be exploited, since April 8, 2025. EUVD reports exploitation since April 8, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 19.3%, the 97th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open