⚡ Exploit-DB.ai HIGH
HIGH

CVE-2023-28252

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Windows CLFS zero-day used by Nokoyawa ransomware to gain SYSTEM privileges post-initial-access. This is the 5th CLFS zero-day since 2022. Apply April 2023 patches and strongly consider monitoring CLFS file access patterns.

📋 Official Description

Windows Common Log File System Driver Elevation of Privilege Vulnerability exploited as zero-day by Nokoyawa ransomware operator GOLD SOUVENIR.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →