CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GIGABYTE Drivers (GPCIDrv/GDrv) Privilege Escalation and Kernel Code Execution (CVE-2018-19322)
[Affected Scope] GPCIDrv and GDrv drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can exploit the exposed IO port read/write functionality to execute arbitrary code with kernel-level privileges (SYSTEM) and bypass security controls
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions, or block and remove the vulnerable drivers using Windows Defender Application Control (WDAC)
GIGABYTE Drivers Arbitrary Physical Memory Read/Write Local Privilege Escalation (CVE-2018-19321)
[Affected Scope] GPCIDrv and GDrv kernel drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] A local attacker can exploit the exposed IOCTL interfaces to read/write arbitrary physical memory, leading to full kernel-level privilege escalation (SYSTEM)
[Mitigation] Upgrade the affected GIGABYTE software to the latest secure versions, or completely uninstall the utilities and block the vulnerable driver files
GIGABYTE GDrv.sys Kernel Driver Arbitrary Memory Write Local Privilege Escalation (LPE) Vulnerability (CVE-2018-19320)
[Affected Scope] GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 containing the GDrv.sys driver
[Impact] A local attacker with low privileges can perform arbitrary kernel-mode (Ring 0) memory read/write operations, leading to complete system takeover and security agent bypass
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions and enforce Windows Defender Application Control (WDAC) or driver blocklists to prevent the vulnerable driver from loading
Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets
Linux Kernel create_elf_tables() Integer Overflow Local Privilege Escalation Vulnerability (CVE-2018-14634, Mutagen Astronomer)
[Affected Scope] Linux kernel versions 2.6.x, 3.10.x, and 4.14.x, primarily affecting Red Hat Enterprise Linux and derivative distributions.
[Impact] An unprivileged local attacker can exploit this vulnerability via SUID binaries to trigger an integer overflow, achieving full root-level privilege escalation.
[Mitigation] Apply the official vendor kernel patches immediately and reboot the system, or implement temporary SUID restrictions and SystemTap mitigations.
Mozilla Firefox and Thunderbird SVG Animation Use-After-Free Vulnerability (CVE-2016-9079) Technical Advisory
[Affected Scope] Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1
[Impact] Remote attackers can execute arbitrary code or cause memory corruption via crafted SVG animation elements, actively exploited in the wild against Tor and Firefox users
[Mitigation] Immediately upgrade to Firefox 50.0.2+, Firefox ESR 45.5.1+, or Thunderbird 45.5.1+
Microsoft COM for Windows Deserialization Remote Code Execution Vulnerability (CVE-2018-0824)
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted serialized objects
[Mitigation] Apply the official Microsoft cumulative security updates and restrict untrusted COM/DCOM network traffic
Linux Kernel Local Privilege Escalation via PIE Binary Mapping Flaw (CVE-2017-1000253)
[Affected Scope] Unpatched long-term support (LTS) Linux kernels and major enterprise distributions including Red Hat Enterprise Linux
[Impact] A local attacker can exploit memory mapping flaws to bypass security boundaries, leading to full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your Linux distribution vendor immediately
Intel Ethernet Diagnostics Driver (IQVW32.sys/IQVW64.sys) Local Privilege Escalation and Arbitrary Code Execution via IOCTL Input Validation Vulnerability (CVE-2015-2291)
[Affected Scope] Intel Ethernet diagnostics drivers (IQVW32.sys and IQVW64.sys) before version 1.3.1.0 on Windows platforms
[Impact] Local attackers can execute arbitrary code with kernel-level (SYSTEM) privileges or trigger a Denial of Service (BSOD) via crafted IOCTL calls
[Mitigation] Upgrade the Intel network adapter driver to version 1.3.1.0 or higher, and enable the Windows Vulnerable Driver Blocklist to prevent exploitation
SKYSEA Client View Remote Code Execution (RCE) Vulnerability (CVE-2016-7836) Analysis and Mitigation Guide
[Affected Scope] SKYSEA Client View Ver.11.221.03 and earlier
[Impact] Remote attackers can bypass authentication to execute arbitrary system commands and gain full control over the target system
[Mitigation] Apply the official vendor security patch immediately and restrict network access to the management console ports
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2016-0165, MS16-039)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008/2012 legacy operating systems
[Impact] Local attackers can execute a specially crafted application to gain SYSTEM-level privileges and fully compromise the host
[Mitigation] Apply the official Microsoft security update (MS16-039) immediately and restrict local execution permissions on unpatched systems
Red Hat / Oracle Linux ABRT Local Privilege Escalation Vulnerability (CVE-2015-5287) Analysis and Mitigation Guide
[Affected Scope] Automatic Bug Reporting Tool (ABRT) versions prior to 2.7.1 installed on Red Hat Enterprise Linux and Oracle Linux systems
[Impact] Local attackers with limited privileges can exploit a symlink attack to gain root privileges and achieve full system compromise
[Mitigation] Upgrade ABRT packages to version 2.7.1 or higher, or temporarily disable the abrt-ccpp service
Red Hat and Linux libuser /etc/passwd Direct Modification Vulnerability (CVE-2015-3246) Advisory
[Affected Scope] Linux systems utilizing libuser versions before 0.56.13-8 and 0.60 before 0.60-7, specifically via the userhelper utility in the usermode package
[Impact] Local attackers can cause a Denial of Service (DoS) by corrupting the /etc/passwd file, or combine this with CVE-2015-3245 to achieve full root privilege escalation
[Mitigation] Immediately update the libuser and usermode packages to the latest patched versions using your system package manager
CVE-2014-6278 Technical Vulnerability Analysis & Patch Advisory (CVSS 8.8)
[Affected Scope] Systems running unpatched versions impacted by CVE-2014-6278
[Impact] GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att...
[Mitigation] Apply vendor security patches and restrict external network exposure.
Qualcomm MSM Audio Driver Stack-Based Buffer Overflow (CVE-2013-2597) Technical Advisory
[Affected Scope] Android devices powered by Qualcomm MSM chipsets running Linux kernel versions 2.6.x and 3.x
[Impact] Local attackers can exploit the /dev/msm_acdb device node to trigger a stack-based buffer overflow, leading to local privilege escalation (LPE) to root
[Mitigation] Apply official kernel patches from Qualcomm/Google, or restrict access permissions to the vulnerable /dev/msm_acdb device node
Linux Kernel n_tty_write Race Condition Local Privilege Escalation (CVE-2014-0196)
[Affected Scope] All Linux systems running Linux kernel versions up to and including 3.14.3
[Impact] Local attackers can exploit a race condition to corrupt kernel memory, leading to a denial of service (system crash) or full root privilege escalation
[Mitigation] Apply the latest kernel security updates provided by your OS vendor and reboot the system
Adobe Flash Player and AIR Double Free Vulnerability Analysis and Mitigation Guide (CVE-2014-0502)
[Affected Scope] Adobe Flash Player on Windows, macOS, Linux, and Adobe AIR/SDK on Android and desktop environments prior to specific patched versions
[Impact] Remote attackers can execute arbitrary code (RCE) and gain full control of the target system via crafted Flash content
[Mitigation] Upgrade to the patched versions immediately, or completely uninstall and disable Adobe Flash Player across all enterprise endpoints
Adobe Flash Player Integer Underflow Remote Code Execution Vulnerability (CVE-2014-0497)
[Affected Scope] Adobe Flash Player before 11.7.700.261, 11.8.x through 12.0.x before 12.0.0.44 on Windows/macOS, and before 11.2.202.336 on Linux
[Impact] Remote attackers can execute arbitrary code and gain full control of the target system by enticing users to visit a website containing a specially crafted Flash (.swf) file
[Mitigation] Immediately uninstall legacy Adobe Flash Player or upgrade to patched versions, and disable Flash execution in all web browsers
Linux Kernel ARM Platform get_user/put_user Missing Address Validation Arbitrary Kernel Memory Read/Write and Privilege Escalation (CVE-2013-6282)
[Affected Scope] Linux kernel before version 3.5.5 running on v6k and v7 ARM platforms, including affected Android devices
[Impact] Local attackers can exploit missing address validation in get_user and put_user APIs to read or write arbitrary kernel memory, leading to full root privilege escalation
[Mitigation] Upgrade the Linux kernel to version 3.5.5 or higher, or apply the latest security patches provided by your OS/device vendor
Microsoft Internet Explorer ActiveX Control (icardie.dll) Out-of-Bounds Write Remote Code Execution Vulnerability (CVE-2013-3918)
[Affected Scope] Internet Explorer and the icardie.dll ActiveX control running on Windows XP, Vista, 7, 8, 8.1, and Windows Server 2003, 2008, 2012
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) by enticing users to visit a specially crafted malicious web page
[Mitigation] Apply the official Microsoft MS13-090 security patch or configure the ActiveX Kill Bit for the icardie.dll control via the registry