CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Kernel Race Condition and Double Free Vulnerability (CVE-2025-62215) Local Privilege Escalation Advisory
[Affected Scope] Windows operating system kernel components and environments utilizing shared resources
[Impact] An authorized local attacker can trigger a race condition to cause kernel memory corruption, leading to local privilege escalation (LPE) to SYSTEM level
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local access privileges on unpatched systems
Windows Kernel Elevation of Privilege Vulnerability (CVE-2021-33771) Deep Dive & Mitigation Guide
[Affected Scope] Supported Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] A local authenticated attacker can exploit a kernel memory corruption vulnerability to execute arbitrary code with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft Latest Cumulative Update (LCU) and restrict local access privileges
Windows Kernel Information Disclosure Vulnerability (CVE-2021-31955) Analysis and Mitigation Guide
[Affected Scope] Multiple Windows operating system versions including Windows 10, Windows 11, and Windows Server 2016/2019/2022
[Impact] Local attackers can retrieve sensitive kernel memory addresses, bypassing Kernel Address Space Layout Randomization (KASLR) to facilitate subsequent Local Privilege Escalation (LPE) attacks
[Mitigation] Apply the official Microsoft Latest Cumulative Update (LCU) to patch the kernel information disclosure flaw
Windows Kernel Local Elevation of Privilege Vulnerability (CVE-2020-17087) Security Advisory
[Affected Scope] Multiple Windows OS versions including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] Local attackers can escalate privileges to SYSTEM, bypassing security controls and gaining full control of the host
[Mitigation] Apply the official Microsoft security patches immediately and restrict unauthorized local access on unpatched systems