Tag: CVE-2023-28252

Microsoft has taken action against an actively exploited zero-day vulnerability and has provided a patch to address it. The vulnerability, known as CVE-2023-28252 and referred to as “Windows Common Log File System Driver Elevation of Privilege Vulnerability,” allows for privilege escalation.  If an attacker gains system access and has the capability to execute code, they… Continue reading CVE-2023-28252: a dangerous combination of zero-day and ransomware