CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2026-208055.5/MEDIUMEPSS 7.5%CISA KEV
2026-01-13

Microsoft Desktop Windows Manager (DWM) Information Disclosure Vulnerability (CVE-2026-20805) Security Advisory

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Desktop Windows Manager (DWM) component

[Impact] An authorized local attacker can disclose sensitive information from kernel or process memory, potentially facilitating subsequent privilege escalation

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict unauthorized local access on unpatched systems

CVE-2023-419927.8/HIGHEPSS 9.5%CISA KEV
2023-09-21

Apple iOS, iPadOS, and macOS Kernel Privilege Escalation Vulnerability (CVE-2023-41992) Security Advisory

[Affected Scope] Apple iOS devices prior to 16.7, iPadOS prior to 16.7, macOS Monterey prior to 12.7, and macOS Ventura prior to 13.6

[Impact] A local attacker can bypass security boundaries to elevate privileges to kernel level, enabling arbitrary code execution and full device compromise; actively exploited in the wild

[Mitigation] Immediately apply the official security updates to iOS/iPadOS 16.7, macOS Monterey 12.7, macOS Ventura 13.6, or later versions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse