CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Agere Modem Driver (ltmdm64.sys) Privilege Escalation Vulnerability (CVE-2025-24990) Technical Advisory
[Affected Scope] Microsoft Windows operating systems with the third-party Agere Modem driver (ltmdm64.sys) installed or natively shipped
[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full host compromise. This vulnerability is actively exploited in the wild (CISA KEV)
[Mitigation] Apply the Microsoft October cumulative update to completely remove the driver, or manually disable and restrict the driver service
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (CVE-2024-35250) Analysis and Mitigation Guide
[Affected Scope] Most supported Windows 10, 11, and Windows Server 2016, 2019, 2022 operating system kernel environments.
[Impact] A local attacker with low privileges can exploit an untrusted pointer dereference (CWE-822) to execute arbitrary code with SYSTEM privileges.
[Mitigation] Immediately apply the latest Windows Cumulative Updates (June 2024 or later) and monitor for Indicators of Compromise (IoCs).
Windows Kernel Elevation of Privilege Vulnerability (CVE-2024-21338) - Active Lazarus APT Exploitation & FUDModule Rootkit Analysis
[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.
[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2023-36033) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the Desktop Window Manager (DWM) core library.
[Impact] A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in November 2023 or later.
CVE-2023-29360 Technical Vulnerability Analysis & Patch Advisory (CVSS 8.4)
[Affected Scope] Systems running unpatched versions impacted by CVE-2023-29360
[Impact] Microsoft Streaming Service Elevation of Privilege Vulnerability...
[Mitigation] Apply vendor security patches and restrict external network exposure.