CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Remote Desktop Services RDP Remote Code Execution Vulnerability (BlueKeep - CVE-2019-0708) Security Advisory
[Affected Scope] Legacy Windows operating systems including Windows XP, Windows 7, Windows Server 2003, Windows Server 2008, and 2008 R2
[Impact] An unauthenticated remote attacker can execute arbitrary code with kernel-level privileges or trigger a system crash (DoS) by sending specially crafted RDP requests, enabling wormable self-propagation across networks
[Mitigation] Immediately apply the official Microsoft security patches, or disable RDP services and enable Network Level Authentication (NLA) if patching is not feasible
Windows Win32k Kernel Privilege Escalation Vulnerability (CVE-2019-0859) Analysis & Mitigation Guide
[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] A local attacker can execute arbitrary code in kernel mode, achieving full SYSTEM privileges and bypassing endpoint security controls
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unnecessary local user privileges
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-0841)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] Local authenticated attackers can exploit improper hard link handling to modify system file permissions and escalate privileges to NT AUTHORITY\SYSTEM
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict unauthorized local interactive logons
Windows Win32k Kernel Memory Object Handling Use-After-Free Local Privilege Escalation (CVE-2019-0803)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing OS security boundaries
[Mitigation] Apply official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems
Microsoft Internet Explorer Scripting Engine Remote Code Execution Vulnerability (CVE-2019-0752) Technical Analysis and Mitigation Guide
[Affected Scope] Systems running Internet Explorer 11 and legacy scripting engines on Windows platforms, including Windows 10
[Impact] Successful exploitation allows remote attackers to execute arbitrary code in the context of the current user, potentially leading to full system compromise
[Mitigation] Apply the latest Microsoft cumulative security updates and disable or transition away from legacy Internet Explorer to modern browsers
Microsoft Windows Win32k Kernel Memory Corruption Local Privilege Escalation (CVE-2019-0808)
[Affected Scope] Legacy Windows operating systems including Windows 7 and Windows Server 2008 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete system control and elevating privileges to SYSTEM
[Mitigation] Immediately apply official Microsoft security patches or migrate to modern supported operating systems (Windows 10/11, Server 2016+)
Windows Win32k Kernel Memory Corruption Local Privilege Escalation Vulnerability (CVE-2019-0797) Analysis & Mitigation Guide
[Affected Scope] Legacy and modern Windows operating systems utilizing the Win32k component, including Windows 8.1, Windows 10, and Windows Server 2012/2016/2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise and security control bypass
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and monitor for anomalous system process creation via EDR solutions
Windows SMB Server Information Disclosure Vulnerability (CVE-2019-0703) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing SMBv1/v2/v3 protocols
[Impact] An authenticated remote attacker can disclose sensitive kernel memory information by sending specially crafted SMB requests, potentially bypassing ASLR to facilitate remote code execution (RCE)
[Mitigation] Apply the official Microsoft cumulative security updates and completely disable the legacy SMBv1 protocol across the infrastructure
Microsoft Windows Authentication Request Handling Local Elevation of Privilege Vulnerability (CVE-2019-0543) Security Advisory
[Affected Scope] Broad range of Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker with low privileges can execute a specially crafted application to elevate privileges to SYSTEM, leading to complete compromise of the host
[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict local user privileges
Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets
Windows Kernel Memory Object Handling Elevation of Privilege Vulnerability (CVE-2018-8611)
[Affected Scope] Broad range of Microsoft OS versions including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete control over the system and bypassing security boundaries
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local user privileges on unpatched systems
Windows Win32k Kernel Privilege Escalation Vulnerability (CVE-2018-8589) Security Advisory
[Affected Scope] Windows 7, Windows Server 2008, and Windows Server 2008 R2 operating systems
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise
[Mitigation] Apply official Microsoft cumulative security updates immediately and restrict local access on unpatched assets
Windows Win32k Kernel Use-After-Free Local Privilege Escalation Vulnerability (CVE-2018-8453) Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and monitor unpatched systems
Windows ALPC Local Elevation of Privilege Vulnerability Technical Advisory (CVE-2018-8440)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker with low-privilege access can exploit the ALPC interface to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict write access to system task directories
Windows Shell Remote Code Execution Vulnerability via Improper File Path Validation (CVE-2018-8414)
[Affected Scope] Windows 10 and Windows Server operating systems
[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted setting files
Windows DirectX Graphics Kernel (DXGKRNL) Elevation of Privilege Vulnerability (CVE-2018-8406)
[Affected Scope] Windows 10, Windows Server 2016, and Windows 10-based Servers.
[Impact] A local attacker can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges).
[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched systems.
Windows DirectX Graphics Kernel (DXGKRNL) Local Elevation of Privilege Vulnerability (CVE-2018-8405)
[Affected Scope] Windows 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1
[Impact] A local attacker can execute arbitrary code in kernel mode, completely compromising the system and gaining SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unauthorized local access
Microsoft Windows VBScript Engine Remote Code Execution Vulnerability (CVE-2018-8174) Technical Advisory
[Affected Scope] Internet Explorer and Microsoft Office applications utilizing the VBScript engine on Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via malicious web pages or crafted Office documents
[Mitigation] Apply the official Microsoft cumulative security updates or disable VBScript execution via registry modifications
Windows Win32k Elevation of Privilege Vulnerability (CVE-2018-8120) Technical Advisory
[Affected Scope] Windows 7, Windows Server 2008, and Windows Server 2008 R2 operating systems.
[Impact] A local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM and fully compromising the host.
[Mitigation] Apply the official Microsoft security updates immediately and restrict local interactive login access on unpatched systems.
Microsoft COM for Windows Deserialization Remote Code Execution Vulnerability (CVE-2018-0824)
[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] Remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted serialized objects
[Mitigation] Apply the official Microsoft cumulative security updates and restrict untrusted COM/DCOM network traffic