A new zero-day vulnerability, CVE-2025-29824, has been discovered in the Windows Common Log File System (CLFS).The vulnerability allows threat actors to escalate privileges to SYSTEM on compromised Windows systems.The flaw has been exploited in the wild and has the potential to be used in ransomware attacks.Microsoft has released patches to fix the CVE-2025-29824 vulnerability.