CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Information Disclosure Vulnerability (CVE-2021-31955) Analysis and Mitigation Guide
[Affected Scope] Multiple Windows operating system versions including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] Local attackers can retrieve sensitive kernel memory addresses, bypassing Kernel Address Space Layout Randomization (KASLR) to facilitate subsequent Local Privilege Escalation (LPE) attacks
[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) to patch the kernel information disclosure flaw
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability (CVE-2021-31201) Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Enhanced Cryptographic Provider component
[Impact] A local attacker can bypass security boundaries to elevate privileges and gain unauthorized system-level access
[Mitigation] Apply the official Microsoft security updates immediately and restrict local execution privileges
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability (CVE-2021-31199) Analysis and Mitigation Guide
[Affected Scope] Systems running Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the Microsoft Enhanced Cryptographic Provider
[Impact] Local attackers can elevate privileges from a low-privileged account to SYSTEM level, leading to complete system compromise
[Mitigation] Immediately apply the official Microsoft security patches and restrict local access privileges on unpatched systems
Windows Print Spooler Remote Code Execution and Privilege Escalation Vulnerability (PrintNightmare - CVE-2021-1675)
[Affected Scope] All Windows and Windows Server operating systems with the Windows Print Spooler (spoolsv.exe) service enabled
[Impact] Authenticated local or remote attackers can execute arbitrary code with SYSTEM privileges, potentially leading to full Domain Controller compromise
[Mitigation] Apply official Microsoft security patches immediately, or disable the Print Spooler service and block remote printing via Group Policy
Microsoft Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-28310) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10 and Windows Server 2016/2019/2022.
[Impact] A local attacker can execute arbitrary code in kernel mode, elevating privileges from a standard user to SYSTEM, leading to complete system compromise.
[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and monitor unpatched assets.
Microsoft Windows Win32k Kernel Elevation of Privilege Vulnerability (CVE-2021-1732) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the win32k.sys driver, including Windows 10 and Windows Server 2016/2019.
[Impact] A local attacker with low privileges can trigger kernel memory corruption (Out-of-bounds Write) to execute arbitrary code with SYSTEM privileges, leading to full host compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local execution privileges for non-administrative users.
Windows Kernel Local Elevation of Privilege Vulnerability (CVE-2020-17087) Security Advisory
[Affected Scope] Multiple Windows OS versions including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] Local attackers can escalate privileges to SYSTEM, bypassing security controls and gaining full control of the host
[Mitigation] Apply the official Microsoft security patches immediately and restrict unauthorized local access on unpatched systems
Windows Authenticode Digital Signature Bypass and Spoofing Vulnerability (CVE-2020-1464) Analysis & Mitigation Guide
[Affected Scope] All major supported Windows operating systems, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019, 2020
[Impact] Attackers can bypass security controls (such as EDRs, antivirus, and AppLocker) by appending malicious payloads to legitimately signed files, making them appear valid
[Mitigation] Apply the official Microsoft cumulative security updates (KB) immediately and audit systems for anomalous signed files
Microsoft Internet Explorer jscript9.dll Memory Corruption Remote Code Execution Vulnerability (CVE-2020-1380)
[Affected Scope] Internet Explorer 11 and Windows systems utilizing the jscript9.dll scripting engine
[Impact] Attackers can execute arbitrary code with the privileges of the current user, potentially gaining full control of the affected system
[Mitigation] Apply official Microsoft cumulative security updates immediately and transition to modern browsers
Microsoft Windows splwow64 Local Privilege Escalation Vulnerability (CVE-2020-0986) Technical Analysis and Hardening Guide
[Affected Scope] 64-bit Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the splwow64.exe process
[Impact] Local attackers can exploit memory corruption (CWE-787) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft security updates immediately, or restrict local execution privileges and disable the Print Spooler service as a temporary workaround
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2020-1054) Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows OS, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system takeover, unauthorized data access, and program installation
[Mitigation] Apply the official Microsoft security patches immediately and restrict local interactive login privileges for untrusted users
Plex Media Server Windows Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-5741)
[Affected Scope] Plex Media Server versions prior to 1.19.3 running on Windows operating systems
[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary Python code via deserialization of untrusted data
[Mitigation] Immediately upgrade Plex Media Server to the latest secure version (1.19.3 or higher) and restrict administrative access
Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-1027) Technical Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows OS including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode and gain full SYSTEM privileges on the target machine
[Mitigation] Apply the official Microsoft security updates immediately and restrict local execution privileges for non-privileged users
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability (CVE-2020-1020)
[Affected Scope] Supported versions of Windows 7, 8.1, RT 8.1, and Windows Server 2008, 2012, 2016, 2019 (excluding Windows 10)
[Impact] An attacker can execute arbitrary code remotely on the target system by tricking a user into opening a specially crafted document or visiting a webpage containing malicious Adobe Type 1 PostScript fonts
[Mitigation] Apply the official Microsoft security patches immediately, or implement workarounds such as disabling the WebClient service and Windows Explorer Preview Pane
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability (CVE-2020-0938)
[Affected Scope] Windows client operating systems prior to Windows 10, and Windows Server editions
[Impact] Remote code execution with kernel-level privileges via a specially crafted Adobe Type 1 PostScript font file
[Mitigation] Apply official Microsoft security updates immediately, or implement workarounds including disabling ATMFD.dll and stopping the WebClient service
Microsoft Windows SMBv3 Remote Code Execution and Privilege Escalation Vulnerability (SMBGhost, CVE-2020-0796) Technical Advisory
[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol
[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks
[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445
Windows Background Intelligent Transfer Service (BITS) Symbolic Link Local Privilege Escalation Vulnerability (CVE-2020-0787) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the BITS service
[Impact] A local authenticated attacker can exploit improper symbolic link handling to overwrite arbitrary system files and execute code with NT AUTHORITY\SYSTEM privileges
[Mitigation] Apply the official Microsoft security updates immediately, or temporarily disable the BITS service and restrict symbolic link creation privileges for non-admin users
Windows Installer Privilege Escalation via Symbolic Link Manipulation (CVE-2020-0683)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 containing the Windows Installer service
[Impact] Local attackers can exploit improper symbolic link handling in MSI packages to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Apply the official Microsoft security updates immediately and restrict non-admin MSI installation privileges as a temporary workaround
Microsoft Internet Explorer Scripting Engine Use-After-Free Remote Code Execution Vulnerability (CVE-2020-0674)
[Affected Scope] Internet Explorer 9, 10, and 11 running on various Windows operating system environments
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by enticing a victim to view a specially crafted website
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict access to the legacy scripting engine (jscript.dll) as a temporary workaround
Windows Update Notification Manager Elevation of Privilege Vulnerability (CVE-2020-0638) Analysis & Mitigation Guide
[Affected Scope] Update Notification Manager service running on Windows 10 and Windows Server operating systems
[Impact] A local attacker can exploit symbolic link creation to overwrite system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable associated scheduled tasks as a temporary workaround