CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Intel Ethernet Diagnostics Driver (IQVW32.sys/IQVW64.sys) Local Privilege Escalation and Arbitrary Code Execution via IOCTL Input Validation Vulnerability (CVE-2015-2291)
[Affected Scope] Intel Ethernet diagnostics drivers (IQVW32.sys and IQVW64.sys) before version 1.3.1.0 on Windows platforms
[Impact] Local attackers can execute arbitrary code with kernel-level (SYSTEM) privileges or trigger a Denial of Service (BSOD) via crafted IOCTL calls
[Mitigation] Upgrade the Intel network adapter driver to version 1.3.1.0 or higher, and enable the Windows Vulnerable Driver Blocklist to prevent exploitation
Sun xVM VirtualBox Kernel Driver (VBoxDrv.sys) Local Privilege Escalation (CVE-2008-3431)
[Affected Scope] Windows host systems running Sun xVM VirtualBox versions prior to 1.6.4.
[Impact] Local attackers can execute arbitrary code with kernel-level privileges (SYSTEM), leading to a complete compromise of the host operating system.
[Mitigation] Immediately upgrade VirtualBox to version 1.6.4 or later, and restrict access permissions to the VBoxDrv device driver.