Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2016-0151
High · 7.8
KEV Urgent · 74 Public exploit Ransomware CWE-269 Apr 12, 2016
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
CVE-2013-0643
High · 8.8
KEV High · 55 CWE-269 Feb 26, 2013
Adobe Flash Player Incorrect Default Permissions Vulnerability
The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.
CVE-2002-0367
High · 7.8
KEV High · 63 Public exploit CWE-269 Jun 25, 2002
Microsoft Windows Privilege Escalation Vulnerability
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.