CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows splwow64 Local Privilege Escalation Vulnerability (CVE-2020-0986) Technical Analysis and Hardening Guide
[Affected Scope] 64-bit Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the splwow64.exe process
[Impact] Local attackers can exploit memory corruption (CWE-787) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft security updates immediately, or restrict local execution privileges and disable the Print Spooler service as a temporary workaround
Microsoft Windows splwow64 Local Privilege Escalation Vulnerability (CVE-2019-0880) Technical Advisory
[Affected Scope] splwow64.exe process running on 64-bit versions of Microsoft Windows operating systems
[Impact] Local attackers with low privileges can execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft security patches immediately, or disable the Print Spooler service on non-essential servers