CVE-2023-38144

EUVD-2023-41969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1507
𝑥
< 10.0.10240.20162
microsoftwindows_10_1607
𝑥
< 10.0.14393.6252
microsoftwindows_10_1809
𝑥
< 10.0.17763.4851
microsoftwindows_10_21h2
𝑥
< 10.0.19044.3448
microsoftwindows_10_22h2
𝑥
< 10.0.19045.3448
microsoftwindows_11_21h2
𝑥
< 10.0.22000.2416
microsoftwindows_11_22h2
𝑥
< 10.0.22621.2275
microsoftwindows_server_2008
-
microsoftwindows_server_2008
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
𝑥
< 10.0.14393.6252
microsoftwindows_server_2019
𝑥
< 10.0.17763.4851
microsoftwindows_server_2022
𝑥
< 10.0.20348.1970
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB5030220
1607 (x64, x86)
KB5030213
1809 (arm64, x64, x86)
KB5030214
21H2 (arm64, x64, x86)
KB5030211
22H2 (arm64, x64, x86)
KB5030211
Windows 11
21H2 (arm64, x64)
KB5030217
22H2 (arm64, x64)
KB5030219
Windows Server 2008
Service Pack 2 (x64, x86)
KB5030271
Service Pack 2 Server Core (x64, x86)
KB5030271
Windows Server 2008 R2
Service Pack 1 (x64)
KB5030265
Service Pack 1 Server Core (x64)
KB5030265
Windows Server 2012
Server Core
KB5030279
Standard
KB5030279
Windows Server 2012 R2
Server Core
KB5030287
Standard
KB5030287
Windows Server 2016
Server Core
KB5030213
Standard
KB5030213
Windows Server 2019
Server Core
KB5030214
Standard
KB5030214
Windows Server 2022
Server Core
KB5030325
Standard
KB5030325
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38144
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38144