CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).
Intel Ethernet Diagnostics Driver (IQVW32.sys/IQVW64.sys) Local Privilege Escalation and Arbitrary Code Execution via IOCTL Input Validation Vulnerability (CVE-2015-2291)
[Affected Scope] Intel Ethernet diagnostics drivers (IQVW32.sys and IQVW64.sys) before version 1.3.1.0 on Windows platforms
[Impact] Local attackers can execute arbitrary code with kernel-level (SYSTEM) privileges or trigger a Denial of Service (BSOD) via crafted IOCTL calls
[Mitigation] Upgrade the Intel network adapter driver to version 1.3.1.0 or higher, and enable the Windows Vulnerable Driver Blocklist to prevent exploitation