CVE-2022-24521 | Netskope Threat Labs

Description

This detection identifies exploitation attempts targeting CVE-2022-24521, which has a HIGH severity rating. Microsoft's advisory names this issue the Windows Common Log File System Driver Elevation of Privilege Vulnerability, which lets a local cyberattacker gain elevated privileges, and Microsoft reported exploitation in the wild.

Stats

First seen: October 2022
Last seen: September 2026

CVEs

CVE-2022-24521

Alert name variants

Alert Name	Engine
Win64.Exploit.CVE-2022-24521	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
FILE-OTHER Microsoft Windows CLFS driver privilege escalation attempt	IPS-SWG

Related families

Marte Microsoft

References

nvd.nist.gov