CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).
Dell dbutil_2_3.sys Kernel Driver Privilege Escalation and Arbitrary Memory Read/Write Vulnerability (CVE-2021-21551)
[Affected Scope] Dell client platforms and firmware update utilities utilizing the dbutil_2_3.sys driver version 2.3
[Impact] Local authenticated attackers can bypass access controls to directly read/write kernel memory, leading to full SYSTEM privilege escalation, denial of service (BSOD), or information disclosure
[Mitigation] Immediately remediate by deleting the vulnerable dbutil_2_3.sys driver file and upgrading to the patched firmware update utility per Dell Advisory DSA-2021-088
GIGABYTE GDrv Driver MSR Arbitrary Read/Write Privilege Escalation Vulnerability (CVE-2018-19323)
[Affected Scope] GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can read and write Machine Specific Registers (MSRs) at the kernel level, enabling Driver Signature Enforcement (DSE) bypass and arbitrary Ring 0 code execution
[Mitigation] Immediately uninstall vulnerable GIGABYTE utilities or upgrade to patched versions, and enforce WDAC policies to block the loading of the vulnerable GDrv.sys driver
GIGABYTE Drivers (GPCIDrv/GDrv) Privilege Escalation and Kernel Code Execution (CVE-2018-19322)
[Affected Scope] GPCIDrv and GDrv drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] Local attackers can exploit the exposed IO port read/write functionality to execute arbitrary code with kernel-level privileges (SYSTEM) and bypass security controls
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions, or block and remove the vulnerable drivers using Windows Defender Application Control (WDAC)
GIGABYTE Drivers Arbitrary Physical Memory Read/Write Local Privilege Escalation (CVE-2018-19321)
[Affected Scope] GPCIDrv and GDrv kernel drivers bundled with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08
[Impact] A local attacker can exploit the exposed IOCTL interfaces to read/write arbitrary physical memory, leading to full kernel-level privilege escalation (SYSTEM)
[Mitigation] Upgrade the affected GIGABYTE software to the latest secure versions, or completely uninstall the utilities and block the vulnerable driver files
GIGABYTE GDrv.sys Kernel Driver Arbitrary Memory Write Local Privilege Escalation (LPE) Vulnerability (CVE-2018-19320)
[Affected Scope] GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 containing the GDrv.sys driver
[Impact] A local attacker with low privileges can perform arbitrary kernel-mode (Ring 0) memory read/write operations, leading to complete system takeover and security agent bypass
[Mitigation] Update the affected GIGABYTE utilities to their latest secure versions and enforce Windows Defender Application Control (WDAC) or driver blocklists to prevent the vulnerable driver from loading
Intel Ethernet Diagnostics Driver (IQVW32.sys/IQVW64.sys) Local Privilege Escalation and Arbitrary Code Execution via IOCTL Input Validation Vulnerability (CVE-2015-2291)
[Affected Scope] Intel Ethernet diagnostics drivers (IQVW32.sys and IQVW64.sys) before version 1.3.1.0 on Windows platforms
[Impact] Local attackers can execute arbitrary code with kernel-level (SYSTEM) privileges or trigger a Denial of Service (BSOD) via crafted IOCTL calls
[Mitigation] Upgrade the Intel network adapter driver to version 1.3.1.0 or higher, and enable the Windows Vulnerable Driver Blocklist to prevent exploitation