CVE-2025-24059
Published: 11 March 2025
Description
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Security Summary
CVE-2025-24059 involves an incorrect conversion between numeric types in the Windows Common Log File System Driver, enabling local privilege escalation. This vulnerability affects the Common Log File System Driver in Windows systems and is classified under CWE-125 (Out-of-bounds Read) and CWE-681 (Incorrect Conversion between Numeric Types). It received a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
A local attacker with low privileges can exploit this vulnerability with low complexity and no user interaction required. Exploitation allows the authorized attacker to elevate privileges locally, achieving high impacts on confidentiality, integrity, and availability of the affected system.
Mitigation details are available in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24059, published on 2025-03-11.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The vulnerability is a local privilege escalation flaw in a Windows kernel driver (Common Log File System), directly enabling T1068 Exploitation for Privilege Escalation via out-of-bounds read and numeric type conversion issues.