CVE-2023-36424CISA KEV
Microsoft Windows Out-of-Bounds Read Vulnerability
CISA lists this Microsoft vulnerability as known exploited. Its MSRC release detail is outside this installation's collected history.
CISA catalog record
Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation
- Product
- Windows
- Added to KEV
- 13 Apr 2026
- Federal remediation due
- 27 Apr 2026
- Known ransomware use
- Not reported