CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Win32k Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2020-1054) Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows OS, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker can execute arbitrary code in kernel mode (SYSTEM privileges), leading to complete system takeover, unauthorized data access, and program installation
[Mitigation] Apply the official Microsoft security patches immediately and restrict local interactive login privileges for untrusted users
Microsoft Windows Win32k Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2015-2360, MS15-061)
[Affected Scope] Windows Server 2003/2008/2012, Windows Vista, Windows 7, Windows 8/8.1, and Windows RT systems
[Impact] Local attackers can execute a crafted application to gain elevated SYSTEM privileges or cause a denial of service (memory corruption)
[Mitigation] Immediately apply the Microsoft official security patch (MS15-061) and restrict local execution privileges on unpatched assets
Microsoft Windows win32k.sys Kernel-Mode Driver Local Privilege Escalation (CVE-2015-1701, MS15-051)
[Affected Scope] Microsoft Windows Server 2003 SP2, Windows Vista SP2, and Server 2008 SP2.
[Impact] Local attackers can execute a specially crafted application to elevate privileges to SYSTEM, gaining full control of the target host.
[Mitigation] Apply the official Microsoft MS15-051 security patch immediately and restrict local execution privileges on unpatched systems.
Microsoft Windows win32k.sys TrueType Font Parsing Remote Code Execution Vulnerability (CVE-2014-4148, MS14-058)
[Affected Scope] Windows Server 2003/2008/2012, Windows Vista, Windows 7, Windows 8/8.1, and Windows RT systems.
[Impact] Remote attackers can execute arbitrary code with kernel-mode privileges and gain full system control by enticing users to render specially crafted TrueType fonts.
[Mitigation] Apply the official Microsoft security update (MS14-058) immediately, or implement workarounds to block untrusted font rendering.
Microsoft Windows Win32k.sys Kernel-Mode Driver Local Privilege Escalation Vulnerability (CVE-2014-4113) Analysis and Mitigation Guide
[Affected Scope] Windows Server 2003/2008/2012, Windows Vista, Windows 7, Windows 8, and 8.1 systems
[Impact] Local attackers can execute a specially crafted application to gain SYSTEM-level privileges and fully compromise the host
[Mitigation] Immediately apply the official Microsoft security patch (MS14-058) and restrict local execution privileges on unpatched systems
Microsoft Windows win32k.sys Kernel-Mode Driver Local Privilege Escalation (CVE-2013-3660)
[Affected Scope] Legacy Windows operating systems including Windows XP, Vista, 7, 8, and Windows Server 2003, 2008, 2012 utilizing the win32k.sys driver.
[Impact] Local attackers can trigger kernel memory corruption to execute arbitrary code with SYSTEM privileges, leading to complete host compromise.
[Mitigation] Immediately apply Microsoft official security patches (MS13-053 or later) and migrate end-of-life (EOL) operating systems to modern supported platforms.
Microsoft Windows win32k.sys TrueType Font Parsing Engine Remote Code Execution Vulnerability (CVE-2011-3402, Duqu Exploited)
[Affected Scope] Windows XP, Vista, 7, and Windows Server 2003, 2008 kernel-mode drivers (win32k.sys)
[Impact] Remote code execution (RCE) with kernel-level privileges via crafted TrueType font data in Word documents or web pages
[Mitigation] Apply official MS11-087 security patches or implement the T2EMBED.DLL registry/ACL workaround
Microsoft Windows Kernel win32k.sys Stack-based Buffer Overflow Local Privilege Escalation (CVE-2010-4398)
[Affected Scope] Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7
[Impact] Local attackers can exploit this to bypass User Account Control (UAC) and execute arbitrary code with SYSTEM privileges
[Mitigation] Apply the official Microsoft security update (MS11-011) and restrict write access to registry keys associated with system fonts