CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Certificate Dialog Elevation of Privilege Vulnerability (CVE-2019-1388) Deep Dive & Mitigation Guide
[Affected Scope] Multiple legacy Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local authenticated attacker can bypass User Account Control (UAC) and execute arbitrary code with NT AUTHORITY\SYSTEM privileges by exploiting a design flaw in the Windows Certificate Dialog
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict UAC behavior and standard user privileges if patching is delayed
Microsoft Windows COM Aggregate Marshaler Privilege Escalation Vulnerability (CVE-2017-0213)
[Affected Scope] Multiple legacy Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker can execute a specially crafted application to elevate privileges to SYSTEM and gain full control of the target system
[Mitigation] Apply the official Microsoft security patches immediately and restrict unnecessary DCOM/COM configurations
Microsoft Windows Kernel win32k.sys Stack-based Buffer Overflow Local Privilege Escalation (CVE-2010-4398)
[Affected Scope] Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7
[Impact] Local attackers can exploit this to bypass User Account Control (UAC) and execute arbitrary code with SYSTEM privileges
[Mitigation] Apply the official Microsoft security update (MS11-011) and restrict write access to registry keys associated with system fonts