CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2016-3309, MS16-098)
[Affected Scope] Multiple legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012
[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control of the affected system
[Mitigation] Apply the official Microsoft security patch (MS16-098) immediately, and migrate end-of-life operating systems to supported versions
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2016-0167, MS16-039)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, Windows Server 2008, 2012 R2, and other legacy Windows OS versions
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges) via a crafted application, leading to full system compromise
[Mitigation] Apply the official Microsoft MS16-039 security patch immediately and restrict local execution privileges on unpatched systems
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2016-0165, MS16-039)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008/2012 legacy operating systems
[Impact] Local attackers can execute a specially crafted application to gain SYSTEM-level privileges and fully compromise the host
[Mitigation] Apply the official Microsoft security update (MS16-039) immediately and restrict local execution permissions on unpatched systems
Microsoft Windows Win32k Kernel-Mode Driver Memory Corruption Privilege Escalation (CVE-2015-2546, MS15-097)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8, 8.1, 10, and Windows Server 2008/2012
[Impact] Local attackers can execute a crafted application to gain elevated SYSTEM privileges and fully compromise the host
[Mitigation] Apply the official Microsoft security update (MS15-097) immediately or upgrade to a supported OS version