Windows Privilege Escalation Flaws Hit CLFS and Cloud Files Drivers

Microsoft disclosed multiple Windows local privilege escalation vulnerabilities affecting kernel-level drivers, including Windows Common Log File System (CLFS) Driver flaws tracked as CVE-2023-23376 and CVE-2023-28252, as well as a Windows Cloud Files Mini Filter Driver flaw tracked as CVE-2025-62454. All three issues were classified as Elevation of Privilege vulnerabilities in Microsoft's Security Update Guide.

The advisories indicate that successful exploitation could allow an attacker who already has access to a target system to gain higher privileges through vulnerable Windows driver components. The affected bugs span separate Windows subsystems but share the same core risk: attackers can abuse low-level driver weaknesses to move from limited access toward more powerful control over compromised machines, reinforcing the need to prioritize Microsoft security updates for Windows kernel and file-system-related components.