CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel ptrace_link Local Privilege Escalation Vulnerability Analysis and Mitigation (CVE-2019-13272)
[Affected Scope] All Linux distributions running Linux kernel versions prior to 5.1.17.
[Impact] A local unprivileged attacker can exploit this vulnerability using Polkit's pkexec helper and PTRACE_TRACEME to obtain full root privileges.
[Mitigation] Upgrade the Linux kernel to version 5.1.17 or higher, or apply the SELinux deny_ptrace workaround.
Microsoft Windows Win32k Kernel Memory Corruption Local Privilege Escalation (CVE-2019-0808)
[Affected Scope] Legacy Windows operating systems including Windows 7 and Windows Server 2008 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete system control and elevating privileges to SYSTEM
[Mitigation] Immediately apply official Microsoft security patches or migrate to modern supported operating systems (Windows 10/11, Server 2016+)
Microsoft Windows COM Aggregate Marshaler Privilege Escalation Vulnerability (CVE-2017-0213)
[Affected Scope] Multiple legacy Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker can execute a specially crafted application to elevate privileges to SYSTEM and gain full control of the target system
[Mitigation] Apply the official Microsoft security patches immediately and restrict unnecessary DCOM/COM configurations
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation (CVE-2016-7255)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker can execute arbitrary code in kernel mode and elevate privileges to SYSTEM via a specially crafted application
[Mitigation] Apply the official Microsoft security patch (MS16-135) immediately and restrict local execution privileges on unpatched systems
SolarWinds Virtualization Manager Local Privilege Escalation Vulnerability (CVE-2016-3643) Analysis & Mitigation Guide
[Affected Scope] SolarWinds Virtualization Manager 6.3.1 and earlier
[Impact] Local attackers can exploit a misconfigured sudo policy to execute arbitrary commands with root privileges, leading to full system compromise
[Mitigation] Upgrade to the latest secure version and immediately restrict insecure sudo permissions in the sudoers configuration
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2016-0167, MS16-039)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, Windows Server 2008, 2012 R2, and other legacy Windows OS versions
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges) via a crafted application, leading to full system compromise
[Mitigation] Apply the official Microsoft MS16-039 security patch immediately and restrict local execution privileges on unpatched systems
Microsoft Windows 10 Kernel Memory Elevation of Privilege Vulnerability (CVE-2015-6175, MS15-135)
[Affected Scope] Microsoft Windows 10 Gold (initial release versions).
[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control of the affected system.
[Mitigation] Apply the official Microsoft security update (MS15-135) or upgrade to the latest Windows 10 cumulative update.
Microsoft Windows Mount Manager Elevation of Privilege Vulnerability (CVE-2015-1769, MS15-085)
[Affected Scope] Windows Vista, 7, 8, 8.1, 10, and Windows Server 2008, 2012 legacy environments
[Impact] A physically proximate attacker can execute arbitrary code with SYSTEM privileges by connecting a crafted USB device, leading to full system compromise
[Mitigation] Apply the MS15-085 security update immediately and restrict unauthorized USB storage devices via Group Policy
Red Hat and Linux libuser /etc/passwd Direct Modification Vulnerability (CVE-2015-3246) Advisory
[Affected Scope] Linux systems utilizing libuser versions before 0.56.13-8 and 0.60 before 0.60-7, specifically via the userhelper utility in the usermode package
[Impact] Local attackers can cause a Denial of Service (DoS) by corrupting the /etc/passwd file, or combine this with CVE-2015-3245 to achieve full root privilege escalation
[Mitigation] Immediately update the libuser and usermode packages to the latest patched versions using your system package manager
Microsoft Windows Ancillary Function Driver (afd.sys) Local Privilege Escalation Vulnerability (CVE-2011-2005, MS11-080)
[Affected Scope] Microsoft Windows XP SP2/SP3 and Windows Server 2003 SP2.
[Impact] Local attackers can execute arbitrary code in kernel mode and gain elevated SYSTEM privileges via a crafted application.
[Mitigation] Apply the official Microsoft MS11-080 security patch, or restrict local execution privileges and isolate legacy systems.
Microsoft Windows Kernel NTVDM Exception Handling Privilege Escalation (CVE-2010-0232, KiTrap0D) Technical Analysis and Mitigation Guide
[Affected Scope] Windows NT 3.1 through Windows 7, and Windows Server 2008 on 32-bit (x86) platforms with 16-bit application support (NTVDM) enabled.
[Impact] Local attackers can exploit this vulnerability to bypass kernel-mode security boundaries, execute arbitrary code with SYSTEM privileges, and fully compromise the host.
[Mitigation] Apply the official Microsoft MS10-015 security update, or disable the 16-bit application subsystem (NTVDM) via Group Policy or Registry modifications.