CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets
Windows Kernel Memory Object Handling Elevation of Privilege Vulnerability (CVE-2018-8611)
[Affected Scope] Broad range of Microsoft OS versions including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete control over the system and bypassing security boundaries
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local user privileges on unpatched systems
Windows DirectX Graphics Kernel (DXGKRNL) Elevation of Privilege Vulnerability (CVE-2018-8406)
[Affected Scope] Windows 10, Windows Server 2016, and Windows 10-based Servers.
[Impact] A local attacker can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges).
[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched systems.
Windows DirectX Graphics Kernel (DXGKRNL) Local Elevation of Privilege Vulnerability (CVE-2018-8405)
[Affected Scope] Windows 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1
[Impact] A local attacker can execute arbitrary code in kernel mode, completely compromising the system and gaining SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unauthorized local access
Windows Win32k Elevation of Privilege Vulnerability (CVE-2018-8120) Technical Advisory
[Affected Scope] Windows 7, Windows Server 2008, and Windows Server 2008 R2 operating systems.
[Impact] A local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM and fully compromising the host.
[Mitigation] Apply the official Microsoft security updates immediately and restrict local interactive login access on unpatched systems.
Cisco IOS and IOS XE UDP Processing Vulnerability: Remote Denial of Service (DoS) Analysis and Mitigation Guide (CVE-2017-6627)
[Affected Scope] Cisco IOS 15.1, 15.2, 15.4 and IOS XE versions 3.14 through 3.18.
[Impact] An unauthenticated, remote attacker can send UDP packets with a destination port of 0 to cause an interface queue wedge, leading to a complete Denial of Service (DoS) condition.
[Mitigation] Upgrade to the latest recommended Cisco IOS/IOS XE software releases, or implement Infrastructure Access Control Lists (iACLs) to drop UDP packets targeting destination port 0.