Detections
Analytics
CVE-2022-24521
high
Description
Windows Common Log File System Driver Elevation of Privilege Vulnerability
From the Tenable Blog
Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521)
Published: 2022-04-12
Microsoft’s April 2022 Patch Tuesday Addresses 117 CVEs (CVE-2022-24521) Microsoft addresses 117 CVEs in its April 2022 Patch Tuesday release, including two zero-day vulnerabilities, one of which was exploited in the wild and reported to Microsoft by the National Security Agency.
References
https://www.securityweek.com/anatomy-of-a-blackcat-attack-through-the-eyes-of-incident-response/
https://www.sygnia.co/blog/blackcat-ransomware/
https://securelist.com/windows-clfs-exploits-ransomware/111560/
https://securelist.com/windows-clfs-exploits-ransomware-cve-2022-24521/111580/
https://www.tenable.com/cyber-exposure/tenable-2022-threat-landscape-report
https://www.tenable.com/blog/microsofts-february-2023-patch-tuesday-addresses-75-cves-cve-2023-23376
https://www.tenable.com/blog/microsofts-april-2022-patch-tuesday-addresses-117-cves-cve-2022-24521
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521