CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-35250) Analysis and Mitigation Guide
[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.
[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.
[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability (CVE-2023-36802) Analysis and Mitigation Guide
[Affected Scope] Microsoft Streaming Service Proxy driver (mskssrv.sys) in Windows 10, Windows 11, and Windows Server families
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full system compromise; actively exploited in the wild
[Mitigation] Apply the official Microsoft security patches immediately, or restrict access to the vulnerable driver as a temporary workaround
Microsoft Windows Kernel-Mode Driver (Transaction Manager) Local Elevation of Privilege (CVE-2017-0101)
[Affected Scope] Legacy and active Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the Kernel Transaction Manager (KTM)
[Impact] A local attacker can execute a specially crafted application to trigger kernel memory corruption (CWE-119), leading to complete system takeover with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches (such as MS17-013) and restrict execution privileges for non-administrative local accounts
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2016-0165, MS16-039)
[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008/2012 legacy operating systems
[Impact] Local attackers can execute a specially crafted application to gain SYSTEM-level privileges and fully compromise the host
[Mitigation] Apply the official Microsoft security update (MS16-039) immediately and restrict local execution permissions on unpatched systems
Microsoft Windows Win32k Kernel-Mode Driver Memory Corruption Privilege Escalation (CVE-2015-2546, MS15-097)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8, 8.1, 10, and Windows Server 2008/2012
[Impact] Local attackers can execute a crafted application to gain elevated SYSTEM privileges and fully compromise the host
[Mitigation] Apply the official Microsoft security update (MS15-097) immediately or upgrade to a supported OS version