CVE-2024-30037 MEDIUM

CVE-2024-30037: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Vendor Microsoft
Product Windows 10 Version 1809
Weakness CWE-125
Published May 14, 2024
Last update May 3, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Key dates

02Disclosure timeline

May 14, 2024 CVE published
May 3, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-9263 Out-of-bounds read in Bluetooth Controller ISOAL framed RX reassembly leaks adjacent memory into host HCI ISO packets CVE-2026-47222 NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow CVE-2026-52721 Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing CVE-2025-7009 Avast antivirus heap buffer OOB read when scanning a malformed PE file CVE-2026-44041 UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated