CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows SmartScreen Security Feature Bypass and Code Execution Vulnerability (CVE-2024-21351) Analysis & Mitigation Guide
[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled
[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-36424) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets
Windows Cloud Files Mini Filter Driver (cldflt.sys) Elevation of Privilege Vulnerability (CVE-2023-36036) Analysis & Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server operating systems utilizing the Cloud Files Mini Filter Driver (cldflt.sys)
[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, achieving full SYSTEM privileges (actively exploited in the wild)
[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the affected driver service as a temporary workaround
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2023-36033) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the Desktop Window Manager (DWM) core library.
[Impact] A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in November 2023 or later.
Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-36025) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can completely bypass Windows SmartScreen warnings and Mark of the Web (MotW) protections via crafted internet shortcut (.url) files, leading to silent malicious code execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files from external sources
Windows Mark of the Web (MotW) Security Feature Bypass Vulnerability Technical Advisory (CVE-2023-36584)
[Affected Scope] All supported versions of Microsoft Windows 10, 11, and Windows Server
[Impact] Attackers can bypass MotW warnings and SmartScreen blocks to execute malicious files without user warnings
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and harden SmartScreen policies
Microsoft WordPad Information Disclosure and NTLM Hash Leak Vulnerability (CVE-2023-36563) Security Advisory
[Affected Scope] Microsoft WordPad application on Windows operating systems
[Impact] Attackers can force the system to leak NTLM credentials (hashes) by inducing users to open a specially crafted document, enabling offline brute-force or NTLM relay attacks
[Mitigation] Apply the official Microsoft cumulative security updates, block outbound NTLM traffic, and restrict outbound SMB connections
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability (CVE-2023-36802) Analysis and Mitigation Guide
[Affected Scope] Microsoft Streaming Service Proxy driver (mskssrv.sys) in Windows 10, Windows 11, and Windows Server families
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full system compromise; actively exploited in the wild
[Mitigation] Apply the official Microsoft security patches immediately, or restrict access to the vulnerable driver as a temporary workaround
Windows Search Remote Code Execution Vulnerability (CVE-2023-36884) Security Advisory & Mitigation Guide
[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites
[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround
Windows Error Reporting (WER) Local Privilege Escalation Vulnerability (CVE-2023-36874) Analysis and Mitigation Guide
[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-32049) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows Operating Systems, including Windows 10, Windows 11, and Windows Server
[Impact] Attackers can bypass the Windows SmartScreen warning dialog when executing downloaded malicious files, leading to immediate code execution without user consent
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict execution of untrusted files
Windows MSHTML Platform Elevation of Privilege Vulnerability (CVE-2023-32046) Analysis and Mitigation Guide
[Affected Scope] Windows client and server operating systems utilizing the MSHTML platform
[Impact] Attackers can bypass security boundaries (including AppContainer restrictions) and execute arbitrary code with the privileges of the logged-in user by tricking them into opening crafted files
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict opening untrusted email attachments or web links
Windows Win32k Elevation of Privilege Vulnerability (CVE-2023-29336) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the Win32k kernel driver.
[Impact] A local attacker can exploit a Use-After-Free (UAF) vulnerability to corrupt kernel memory, leading to arbitrary code execution with SYSTEM privileges.
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and enhance monitoring for Indicators of Compromise (IoCs).
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-28252) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the clfs.sys driver
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, fully compromising the host and disabling security controls
[Mitigation] Apply the Microsoft April 2023 security updates immediately, or restrict .blf file creation permissions as a temporary workaround
Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2023-28229) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server deployments running the CNG Key Isolation (KeyIso) service
[Impact] Local authenticated attackers with low privileges can execute arbitrary code with SYSTEM privileges by running a specially crafted application
[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and restrict unauthorized local access
Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can bypass Mark of the Web (MotW) warnings and Windows SmartScreen blocks using specially crafted signatures, leading to silent malware execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict untrusted file execution using AppLocker/WDAC policies
Windows Graphics Component Integer Overflow Remote Code Execution Vulnerability (CVE-2023-21823) Analysis and Mitigation Guide
[Affected Scope] All Windows systems utilizing the Windows Graphics component, including Windows 10, Windows 11, and Windows Server 2008-2022
[Impact] Local attackers can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft security updates immediately and ensure Windows Graphics-related Store apps are updated to their latest versions
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-23376) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2016, 2019, 2022 utilizing the CLFS driver
[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft cumulative security updates (February 2023 Patch Tuesday) and monitor unpatched assets
Windows ALPC (Advanced Local Procedure Call) Use-After-Free Elevation of Privilege Vulnerability (CVE-2023-21674) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the ALPC mechanism
[Impact] Successful exploitation allows a local attacker to bypass sandbox environments, elevate privileges to SYSTEM, and execute arbitrary code to fully compromise the host
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in January 2023 or later