CVE-2023-28252

ATP Sandbox Adv. HeuristicsNetskope IPS

Description

This detection identifies exploitation attempts targeting CVE-2023-28252, which has a HIGH severity rating. Microsoft's advisory names this issue the Windows Common Log File System Driver Elevation of Privilege Vulnerability, which lets a local cyberattacker gain elevated privileges, and researchers observed exploitation in the wild.

Stats

First seen: May 2024
Last seen: October 2026

CVEs

Alert name variants

Alert Name	Engine
Win64.Exploit.CVE-2023-28252	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
OS-WINDOWS Microsoft Windows Common Log File System escalation of privilege attempt	IPS-SWG

Related blogs

Threat Labs News Roundup: April 2023

May 8, 20234 min read

Related families

References

nvd.nist.gov