CNNVD-202511-1062 Information
CNNVD ID
CNNVD-202511-1062
Related CVE
- CNNVD Published: 2025-11-11
Description (Chinese)
Microsoft Windows Common Log File System Driver是美国微软（Microsoft）公司的通用日志文件系统 (CLFS) API 提供了一个高性能、通用的日志文件子系统，专用客户端应用程序可以使用该子系统并且多个客户端可以共享以优化日志访问。 Microsoft Windows Common Log File System Driver存在缓冲区错误漏洞。攻击者利用该漏洞可以提升权限。以下产品和版本受到影响：Windows 11 Version 25H2 for ARM64-based Systems,Windows 11 Version 25H2 for x64-based Systems,Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation),Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 for ARM64-based Systems,Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 22H2 for x64-based Systems,Windows 10 Version 22H2 for ARM64-based Systems,Windows 10 Version 22H2 for 32-bit Systems,Windows Server 2025 (Server Core installation),Windows 11 Version 23H2 for ARM64-based Systems,Windows 11 Version 23H2 for x64-based Systems,Windows Server 2022, 23H2 Edition (Server Core installation),Windows 11 Version 24H2 for ARM64-based Systems,Windows 11 Version 24H2 for x64-based Systems,Windows Server 2025,Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation)。
Description (English)
Microsoft Windows Common Log File System Driver, a United States-based Microsoft Common Log File System (CLFS) API, provides a high-performance, common log file subsystem that can be used by a dedicated client application and shared by multiple clients to optimize log access. Microsoft Windows Common Log File System Driver has an error hole in the buffer zone. The attackers use this loophole to enhance their authority. The following products and versions are affected: Wows 11 Verse 2 Wowe-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Le-Se-Le-Le-Se-Se-Se-Se-Le-Se-Se-Se-Se-Se-Se-Se
Hazard Level
Medium
Vulnerability Type
缓冲区错误
Affected Vendor
微软
Published
2025-11-11
Last Modified
2026-02-24
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60709
Patch
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60709
Share on: