CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Win32k Kernel Subsystem Use-After-Free Local Privilege Escalation Vulnerability (CVE-2025-24983) Urgent Security Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Win32k kernel subsystem
[Impact] An authorized local attacker can elevate privileges to SYSTEM level, gaining full control over the affected system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and restrict unauthorized local access
Windows Win32k Kernel Memory Object Handling Privilege Escalation (CVE-2018-8639) Technical Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the Win32k component
[Impact] Local attackers can execute arbitrary code in kernel mode, completely compromising the system and escalating privileges from local user to SYSTEM
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local interactive login permissions on unpatched assets