CVE-2022-21998

CVE-2022-21998 is an information disclosure vulnerability in the Windows Common Log File System Driver, affecting numerous Windows client and server operating systems including Windows 10, 11, and various Server versions. With a CVSS score of 5.5 (MEDIUM), it requires local access and low privileges, but successful exploitation could lead to high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, indicating a low immediate threat. Community discussion and media coverage are minimal, with only one article mentioning it in the context of Microsoft's February 2022 Patch Tuesday.