CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Audinate Dante Discovery mDNSResponder.exe DLL Sideloading and Privilege Escalation Vulnerability (CVE-2022-23748) Analysis & Mitigation Guide
[Affected Scope] Windows systems running Audinate Dante Discovery services and utilizing the mDNSResponder.exe component
[Impact] Local attackers can leverage the legitimate, signed executable to load malicious DLLs, leading to arbitrary code execution with elevated privileges
[Mitigation] Apply official security patches from Audinate, restrict write permissions on the mDNSResponder execution directory, and monitor for unauthorized DLL loads
Windows CSRSS Elevation of Privilege Vulnerability (CVE-2022-22047) Technical Advisory
[Affected Scope] Wide range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker can exploit the vulnerability to execute arbitrary code with SYSTEM privileges by abusing the CSRSS process
[Mitigation] Immediately apply the Microsoft official Cumulative Update (LCU) and monitor for unauthorized local account activities and anomalous child processes
Microsoft Office and VBA VBE6.dll Untrusted Search Path Vulnerability (CVE-2012-1854) Advisory
[Affected Scope] Microsoft Office 2003 SP3, 2007 SP2/SP3, 2010 Gold/SP1, and systems utilizing Visual Basic for Applications (VBA)
[Impact] Local attackers can execute arbitrary code and escalate privileges by tricking a user into opening a document in a directory containing a malicious DLL
[Mitigation] Apply the official Microsoft security update (MS12-046) and restrict insecure DLL loading via registry modifications