CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Ancillary Function Driver (afd.sys) Elevation of Privilege Vulnerability (CVE-2025-21418) Technical Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the WinSock Ancillary Function Driver (afd.sys)
[Impact] Local attackers can trigger kernel memory corruption (Heap-based Buffer Overflow) to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the Microsoft February 2025 Patch Tuesday cumulative updates and restrict unauthorized local execution privileges
Windows Storage Elevation of Privilege Vulnerability (CVE-2025-21391) Security Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing Windows Storage components
[Impact] Local attackers with low privileges can exploit symbolic link creation to overwrite critical system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Apply the Microsoft February 2025 security updates immediately and restrict local symbolic link creation privileges on unpatched systems
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21335) Analysis and Mitigation Guide
[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments
[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21334) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled
[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise
[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability (CVE-2025-21333) Analysis and Mitigation Guide
[Affected Scope] Windows Server and Desktop operating systems with the Windows Hyper-V virtualization role enabled
[Impact] A local attacker can exploit a heap-based buffer overflow (CWE-122) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise
[Mitigation] Apply the official Microsoft security patches immediately, or temporarily disable non-essential Hyper-V services to reduce the attack surface
Windows CLFS Driver Heap-Based Buffer Overflow Elevation of Privilege Vulnerability (CVE-2024-49138) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server systems utilizing the Common Log File System (CLFS) driver
[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, escalating privileges to SYSTEM
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict unauthorized creation of CLFS log (.blf) files
Windows Task Scheduler Elevation of Privilege Vulnerability (CVE-2024-49039) Technical Advisory
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] A local attacker with low privileges can bypass security boundaries via RPC interfaces to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the Microsoft November 2024 Security Update and restrict local user privileges
Windows Installer Elevation of Privilege Vulnerability (CVE-2024-38014) Security Advisory
[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server editions
[Impact] A locally authenticated attacker can exploit flaws in the Windows Installer service to elevate privileges to NT AUTHORITY\SYSTEM and execute arbitrary code
[Mitigation] Apply the Microsoft September 2024 security updates immediately and restrict Windows Installer privileges for non-administrative users
Windows Power Dependency Coordinator (PDC) Use-After-Free Local Privilege Escalation Vulnerability (CVE-2024-38107) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Immediately apply the Microsoft official cumulative security updates released in August 2024 or later
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-38106) Technical Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments
[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-35250) Analysis and Mitigation Guide
[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.
[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.
[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2024-30051) Technical Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Desktop Window Manager (DWM) Core Library
[Impact] Local attackers can trigger a heap-based buffer overflow to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Immediately apply the Microsoft May 2024 Patch Tuesday cumulative security updates and restrict unauthorized local access
Windows Error Reporting (WER) Service Elevation of Privilege Vulnerability (CVE-2024-26169) Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply Microsoft official security patches and monitor for anomalous child processes spawned by the WER service
Microsoft Exchange Server Elevation of Privilege and NTLM Relay Vulnerability (CVE-2024-21410) Urgent Security Advisory
[Affected Scope] Microsoft Exchange Server 2016 and 2019 environments where Cumulative Updates and Extended Protection are not enabled.
[Impact] Unauthenticated remote attackers can perform NTLM credential relay attacks to elevate privileges, gaining administrative access to Exchange servers and compromising mailboxes.
[Mitigation] Upgrade Exchange Server to the latest Cumulative Update (CU) and enforce the Extended Protection feature immediately.
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-36424) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets
Windows Cloud Files Mini Filter Driver (cldflt.sys) Elevation of Privilege Vulnerability (CVE-2023-36036) Analysis & Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server operating systems utilizing the Cloud Files Mini Filter Driver (cldflt.sys)
[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, achieving full SYSTEM privileges (actively exploited in the wild)
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the affected driver service as a temporary workaround
Microsoft Skype for Business Server Elevation of Privilege & SSRF Vulnerability (CVE-2023-41763) Analysis and Mitigation Guide
[Affected Scope] On-premises deployments of Microsoft Skype for Business Server 2015 and 2019
[Impact] Unauthenticated remote attackers can send specially crafted HTTP requests to perform Server-Side Request Forgery (SSRF), accessing internal network resources and exposing sensitive information
[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) patches and restrict outbound traffic from the application servers
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability (CVE-2023-36802) Analysis and Mitigation Guide
[Affected Scope] Microsoft Streaming Service Proxy driver (mskssrv.sys) in Windows 10, Windows 11, and Windows Server families
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full system compromise; actively exploited in the wild
[Mitigation] Apply the official Microsoft security patches immediately, or restrict access to the vulnerable driver as a temporary workaround
Windows Error Reporting (WER) Local Privilege Escalation Vulnerability (CVE-2023-36874) Analysis and Mitigation Guide
[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges