Microsoft: Windows CLFS zero-day exploited by ransomware gang

Microsoft has disclosed that the RansomEXX ransomware group exploited a zero-day vulnerability (CVE-2025-29824) in the Windows Common Log File System (CLFS) to gain SYSTEM privileges.