CVE-2025-29824

This repository contains a proof-of-concept exploit for CVE-2025-29824, a use-after-free vulnerability in the Windows Common Log File System (CLFS) kernel driver. The exploit escalates privileges from a standard user to SYSTEM by leveraging a race condition in W32PROCESS handling.

This repository contains a proof-of-concept exploit for CVE-2025-29824, a privilege escalation vulnerability in Windows CLFS (Common Log File System). The exploit leverages a use-after-free (UAF) condition to achieve SYSTEM privileges via token manipulation.

This repository contains functional exploit code for CVE-2025-29824, targeting Windows 10 and 11 systems. It includes PoC code for both crash (BSOD) and local privilege escalation (LPE) scenarios, along with a driver to monitor CLFS.SYS IRP requests.

This is a detailed technical analysis of CVE-2025-29824, a local privilege escalation vulnerability in the Windows Common Log File System (CLFS) driver. The writeup includes root cause analysis, reverse-engineered code snippets, and an explanation of the pool feng shui race condition leading to a use-after-free (UAF) vulnerability.