CVE-2022-37969

Deeper analysis

CVE-2022-37969 is an elevation-of-privilege vulnerability in the Windows Common Log File System Driver. The flaw is an out-of-bounds write (CWE-787) that receives a CVSS 3.1 score of 7.8 and affects supported Windows releases that include the driver component.

A local attacker with low privileges can exploit the issue without user interaction to obtain full administrative control over the affected system, resulting in complete compromise of confidentiality, integrity, and availability.

Microsoft’s security update guide supplies patches that address the driver flaw; the vulnerability is also listed in CISA’s Known Exploited Vulnerabilities catalog, confirming that in-the-wild exploitation has been observed and that organizations should prioritize remediation.

EPSS scores have reached a peak of 0.1488 with a current value of 0.1279, indicating sustained but not sharply escalating public interest in exploitation since disclosure.