PT-2025-21008 · Microsoft · Windows Common Log File System Driver+1

Benoit Sevens · Published 2025-05-13 · Updated 2025-12-15 · CVE-2025-32706

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver versions prior to the fixed version

Description The issue is related to improper input validation in the Windows Common Log File System Driver, allowing an authorized attacker to elevate privileges locally. This vulnerability has been exploited in real-world attacks, with cases reported in companies in the USA, Venezuela, Spain, and Saudi Arabia. The estimated number of potentially affected devices is not specified.

Recommendations To resolve the issue, update the Windows Common Log File System Driver to the latest version. As a temporary workaround, consider restricting access to the vulnerable driver until a patch is available. Additionally, ensure that all security updates from Microsoft are installed, as they may include patches for this vulnerability. If no specific fix is provided for a particular version, it is recommended to follow general best practices for securing Windows systems.

Exploit

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-05438

CVE-2025-32706

Affected Products

Windows

Windows Common Log File System Driver

References · 57

• 🔥 https://vicarius.io/vsociety/posts/cve-2025-32706-mitigation-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver · Exploit
• 🔥 https://vicarius.io/vsociety/posts/cve-2025-32706-detection-script-elevation-of-privilege-vulnerability-in-microsoft-windows-common-log-file-system-driver · Exploit
• https://osv.dev/vulnerability/CVE-2025-32706 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32706 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32706 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/721013 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-32706 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05438 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-32706 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32706 · Security Note
• https://twitter.com/varwar1337/status/1922349126815006951 · Twitter Post
• https://twitter.com/transilienceai/status/1924819517852488186 · Twitter Post
• https://twitter.com/PintoriAlice/status/1922931570148770136 · Twitter Post
• https://twitter.com/transilienceai/status/1926798681996472704 · Twitter Post
• https://twitter.com/transilienceai/status/1922993395766788208 · Twitter Post