CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Win32k Kernel Subsystem Use-After-Free Local Privilege Escalation Vulnerability (CVE-2025-24983) Urgent Security Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Win32k kernel subsystem
[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the affected system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access
Windows Win32k Elevation of Privilege Vulnerability (CVE-2023-29336) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver.
[Impact] A local attacker can exploit a Use-After-Free (UAF) vulnerability to corrupt kernel memory, leading to arbitrary code execution with SYSTEM privileges.
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and enhance monitoring for Indicators of Compromise (IoCs).
Windows Win32k Kernel Local Privilege Escalation (LPE) Vulnerability Analysis and Mitigation Guide (CVE-2022-21882)
[Affected Scope] Windows 10, Windows 11, and Windows Server 2016/2019/2022 systems utilizing the Win32k kernel driver
[Impact] A local authenticated attacker can trigger kernel memory corruption (CWE-787) to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft cumulative security updates (KB) and monitor for indicators of compromise (IoCs)
Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-41357) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges)
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local interactive access on unpatched assets
Microsoft Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-40450) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] A local authenticated attacker can execute arbitrary code in kernel mode and elevate privileges to SYSTEM by running a specially crafted application.
[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict local execution privileges on unpatched systems.
Windows Win32k NtGdiResetDC Use-After-Free Local Privilege Escalation Vulnerability (CVE-2021-40449) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver
[Impact] Local attackers can execute arbitrary code in kernel mode, escalating privileges from a standard user to SYSTEM, with active exploitation observed in the wild by APT groups
[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local execution privileges on unpatched systems
Microsoft Windows Win32k Elevation of Privilege Vulnerability (CVE-2021-28310) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10 and Windows Server 2016/2019/2022.
[Impact] A local attacker can execute arbitrary code in kernel mode, elevating privileges from a standard user to SYSTEM, leading to complete system compromise.
[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and monitor unpatched assets.
Microsoft Windows Win32k Kernel Elevation of Privilege Vulnerability (CVE-2021-1732) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the win32k.sys driver, including Windows 10 and Windows Server 2016/2019.
[Impact] A local attacker with low privileges can trigger kernel memory corruption (Out-of-bounds Write) to execute arbitrary code with SYSTEM privileges, leading to full host compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local execution privileges for non-administrative users.
Windows Win32k Kernel Memory Handling Local Privilege Escalation Vulnerability (CVE-2019-1458) Analysis and Mitigation Guide
[Affected Scope] Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing security controls and compromising the host
[Mitigation] Immediately apply the official Microsoft cumulative security updates (KB) and restrict unauthorized local executable execution
Windows Win32k Kernel Memory Corruption Local Privilege Escalation Vulnerability (CVE-2019-1132) Analysis & Mitigation Guide
[Affected Scope] Legacy Windows operating systems including Windows 7, Windows Server 2008, and Windows Server 2008 R2 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), completely compromising the host and bypassing security controls
[Mitigation] Immediately apply the official Microsoft cumulative security updates or migrate legacy systems to currently supported Windows versions
Windows Win32k Kernel Privilege Escalation Vulnerability (CVE-2019-0859) Analysis & Mitigation Guide
[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] A local attacker can execute arbitrary code in kernel mode, achieving full SYSTEM privileges and bypassing endpoint security controls
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unnecessary local user privileges
Windows Win32k Kernel Memory Object Handling Use-After-Free Local Privilege Escalation (CVE-2019-0803)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k subsystem
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), completely bypassing OS security boundaries
[Mitigation] Apply official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems
Microsoft Windows Win32k Kernel Memory Corruption Local Privilege Escalation (CVE-2019-0808)
[Affected Scope] Legacy Windows operating systems including Windows 7 and Windows Server 2008 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, gaining complete system control and elevating privileges to SYSTEM
[Mitigation] Immediately apply official Microsoft security patches or migrate to modern supported operating systems (Windows 10/11, Server 2016+)
Windows Win32k Kernel Memory Corruption Local Privilege Escalation Vulnerability (CVE-2019-0797) Analysis & Mitigation Guide
[Affected Scope] Legacy and modern Windows operating systems utilizing the Win32k component, including Windows 8.1, Windows 10, and Windows Server 2012/2016/2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise and security control bypass
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and monitor for anomalous system process creation via EDR solutions
Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets
Windows Win32k Kernel Privilege Escalation Vulnerability (CVE-2018-8589) Security Advisory
[Affected Scope] Windows 7, Windows Server 2008, and Windows Server 2008 R2 operating systems
[Impact] Local attackers can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise
[Mitigation] Apply official Microsoft cumulative security updates immediately and restrict local access on unpatched assets
Windows Win32k Kernel Use-After-Free Local Privilege Escalation Vulnerability (CVE-2018-8453) Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and monitor unpatched systems
Windows Win32k Elevation of Privilege Vulnerability (CVE-2018-8120) Technical Advisory
[Affected Scope] Windows 7, Windows Server 2008, and Windows Server 2008 R2 operating systems.
[Impact] A local attacker can execute arbitrary code in kernel mode, elevating privileges to SYSTEM and fully compromising the host.
[Mitigation] Apply the official Microsoft security updates immediately and restrict local interactive login access on unpatched systems.
Microsoft Windows Win32k Kernel-Mode Driver Use-After-Free Local Privilege Escalation (CVE-2017-0263)
[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the win32k.sys driver.
[Impact] A local attacker can execute a specially crafted application to gain elevated SYSTEM privileges, completely bypassing OS security boundaries.
[Mitigation] Apply the official Microsoft security patches immediately and restrict execution privileges for untrusted local users.
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation (CVE-2016-7255)
[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker can execute arbitrary code in kernel mode and elevate privileges to SYSTEM via a specially crafted application
[Mitigation] Apply the official Microsoft security patch (MS16-135) immediately and restrict local execution privileges on unpatched systems