Executive brief
The Microsoft Windows Cloud Files Mini Filter Driver contains an elevation of privilege vulnerability caused by a heap-based buffer overflow (out-of-bounds write). Successful exploitation allows a local attacker to gain SYSTEM privileges.
Affected products
- Microsoft Windows 10 1507, 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 21H2, 22H2, 23H2
- Microsoft Windows Server 2008 SP2
Timeline
- 2023-11-14: disclosed
- 2023-11-14: patched
- 2023-11-14: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2023-11-14: exploited: Reported as exploited in the wild at time of publication.