CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Remote Access Connection Manager (RasMan) Null Pointer Dereference Local DoS Vulnerability (CVE-2026-21525) Technical Advisory
[Affected Scope] Windows and Windows Server operating systems utilizing the Windows Remote Access Connection Manager (RasMan) service.
[Impact] An unauthorized local attacker can trigger a Null Pointer Dereference in the RasMan service, causing a local Denial of Service (DoS) by crashing the service or the entire system.
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service if remote access features are not required.
Windows Ancillary Function Driver (afd.sys) Local Privilege Escalation Vulnerability (CVE-2025-32709) Analysis and Mitigation Guide
[Affected Scope] Windows and Windows Server operating systems utilizing the WinSock Ancillary Function Driver (afd.sys)
[Impact] An authorized local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM, which is actively exploited in the wild
[Mitigation] Immediately apply the official Microsoft security updates and restrict unauthorized local access to critical systems
Microsoft Silverlight Double Dereference Remote Code Execution Vulnerability (CVE-2013-0074)
[Affected Scope] Microsoft Silverlight 5 and Silverlight 5 Developer Runtime versions prior to 5.1.20125.0
[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing users to visit a website containing a specially crafted Silverlight application
[Mitigation] Upgrade Microsoft Silverlight to version 5.1.20125.0 or later, or completely uninstall the Silverlight plugin from all endpoints