CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2020-1054) Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows OS, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system takeover, unauthorized data access, and program installation
[Mitigation] Apply the official Microsoft security patches immediately and restrict local interactive login privileges for untrusted users
Microsoft Windows splwow64 Local Privilege Escalation Vulnerability (CVE-2019-0880) Technical Advisory
[Affected Scope] splwow64.exe process running on 64-bit versions of Microsoft Windows operating systems
[Impact] Local attackers with low privileges can execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft security patches immediately, or disable the Print Spooler service on non-essential servers
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1064)
[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)
[Impact] Local authenticated attackers can execute specially crafted applications to run arbitrary processes in an elevated SYSTEM context, leading to full system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local interactive logon privileges for unauthorized users
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-0841)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] Local authenticated attackers can exploit improper hard link handling to modify system file permissions and escalate privileges to NT AUTHORITY\SYSTEM
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict unauthorized local interactive logons
GIGABYTE Drivers Arbitrary Physical Memory Read/Write Local Privilege Escalation (CVE-2018-19321)
[Affected Scope] GPCIDrv and GDrv kernel drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] A local attacker can exploit the exposed IOCTL interfaces to read/write arbitrary physical memory, leading to full kernel-level privilege escalation (SYSTEM)
[Mitigation] Upgrade the affected GIGABYTE software to the latest secure versions, or completely uninstall the utilities and block the vulnerable driver files
GIGABYTE GDrv.sys Kernel Driver Arbitrary Memory Write Local Privilege Escalation (LPE) Vulnerability (CVE-2018-19320)
[Affected Scope] GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 containing the GDrv.sys driver
[Impact] A local attacker with low privileges can perform arbitrary kernel-mode (Ring 0) memory read/write operations, leading to complete system takeover and security agent bypass
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions and enforce Windows Defender Application Control (WDAC) or driver blocklists to prevent the vulnerable driver from loading