CVE-2025-29824
In 4 briefs, most recently 20 August 2025. RSS for this tag
Published 2025-04-08
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability.
Added 2025-04-08 · used in ransomware campaigns
Coverage in DanSec Daily
- Allianz Life Salesforce breach exposes 1.1M records, Play ransomware exploits Windows CLFS, and ActiveMQ attackers deploy DripDropper malware.
- The Workday CRM breach, unpatched N-able N-central servers under active exploitation, and RansomExx's PipeMagic backdoor abusing a Windows flaw.
- Workday breach linked to Salesforce attacks, unpatched N-able N-central servers under active exploitation, and $2.8M seized from Zeppelin ransomware operator.
- LockBit's breach, PowerSchool extortion of school districts, and the actively exploited OttoKit WordPress flaw.