Windows Common Log File System Driver EoP
Vulnerability details
CVECVE-2024-20653
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2026-07-29
VendorMicrosoft
Affected softwareWindows 10/11/Server
ExposureMedium
Affected devices7
Exploit statusPublicExploit
Recommendation & plan
Apply the January 2024 security update.
Due2026-09-17
Affected devices 7
| Device | Risk | Installed | Fixed | Status |
|---|---|---|---|---|
| corp-dc01 | Medium | older | patched | Open |
| corp-srv-app02 | High | older | patched | Open |
| corp-srv-file01 | Medium | older | patched | Open |
| corp-wks-1187 | High | older | patched | Open |
| corp-wks-0421 | Medium | older | patched | Open |
| corp-wks-0913 | Low | older | patched | Open |
| corp-lap-2210 | Medium | older | patched | Open |
Remediation workflow
CVE โ Affected Software โ Affected Devices โ Risk โ Exploitability โ Security Recommendation โ Remediation Plan โ Approval โ Remediation โ Verification
Remediation requests require approval. After remediation, verification checks: vulnerability resolved, device healthy, exposure reduced.
