Update: proof of concept on GitHub published. Microsoft Windows systems that include the Common Log File System (CLFS) driver are affected by this vulnerability. An attacker who can already run code on a vulnerable system could exploit it to gain higher, SYSTEM-level privileges.