Patchfirst
Patchfirst
T1068Privilege Escalation

Exploitation for Privilege Escalation

Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and…

attack.mitre.org ↗
CVEs411
In 357
Reports10

Detections

31 Sigma rules tagged T1068
Exploitation for Privilege EscalationT106831 general rules
All 31 on SigmaHQ ↗

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Exploitation for Privilege Escalation

Top 150 of 411 by priority. Each link shows its badge.
  1. CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation4 reports
    AI mapping from the description · how it is exploited
    99.8%Top 0.04%
    88.1priority
  2. CVE-2022-47966Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
    Zoho · ManageEngineKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1136.001Local Account+1 more · 3 reports
    MITRE CTID mapping of the KEV entry · primary impact
    99.8%Top 0.04%
    87.6priority
  3. CVE-2017-0213Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.3T1548Abuse Elevation Control MechanismT1068Exploitation for Privilege Escalation4 reports
    MITRE CTID mapping of the CVE · uncategorised
    84.3%Top 0.3%
    87.0priority
  4. CVE-2020-1472Microsoft Netlogon Privilege Escalation Vulnerability
    Microsoft · NetlogonKEVRansomwarePublic exploitMedium · 5.5T1133External Remote ServicesT1068Exploitation for Privilege Escalation+4 more · 8 reports
    MITRE CTID mapping of the KEV entry · primary impact
    99.4%Top 0.06%
    86.8priority
  5. CVE-2021-4034Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
    Red Hat · PolkitKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    MITRE CTID mapping of the KEV entry · how it is exploited
    94.9%Top 0.14%
    86.2priority
  6. CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation3 reports
    MITRE CTID mapping of the CVE · uncategorised
    55.9%Top 0.95%
    86.0priority
  7. CVE-2019-1458Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    AI mapping from the description · how it is exploited
    74.4%Top 0.51%
    84.5priority
  8. CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
    LiteSpeed · cPanel PluginKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    17.9%Top 2.8%
    84.3priority
  9. CVE-2026-46817Oracle E-Business Suite Improper Privilege Management Vulnerability
    Oracle · E-Business SuiteKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    12.3%Top 3.8%
    84.1priority
  10. CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+2 more · 1 report
    MITRE CTID mapping of the KEV entry · how it is exploited
    94.3%Top 0.15%
    83.7priority
  11. CVE-2022-41040Microsoft Exchange Server Server-Side Request Forgery Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    83.0priority
  12. CVE-2022-0847Linux Kernel Privilege Escalation Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    92.8%Top 0.17%
    82.3priority
  13. CVE-2026-33825Microsoft Defender Insufficient Granularity of Access Control Vulnerability
    Microsoft · DefenderKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    6.7%Top 6%
    82.3priority
  14. CVE-2018-8453Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    70.0%Top 0.62%
    82.2priority
  15. CVE-2021-1732Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    78.4%Top 0.42%
    82.2priority
  16. CVE-2019-0803Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    45.2%Top 1.2%
    82.1priority
  17. CVE-2020-0787Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report
    MITRE CTID mapping of the KEV entry · how it is exploited
    42.5%Top 1.3%
    82.1priority
  18. CVE-2021-42278Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    73.3%Top 0.54%
    82.0priority
  19. CVE-2025-60710Microsoft Windows Link Following Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    4.6%Top 8.3%
    81.8priority
  20. CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
    Intel · Ethernet Diagnostics Driver for WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation+1 more · 1 report
    AI mapping from the description · how it is exploited
    15.7%Top 3.1%
    81.7priority
  21. CVE-2015-2546Microsoft Win32k Memory Corruption Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 8.2T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · primary impact
    10.1%Top 4.4%
    81.7priority
  22. CVE-2020-0986Microsoft Windows Kernel Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    16.4%Top 3%
    81.7priority
  23. CVE-2021-35211SolarWinds Serv-U Remote Code Execution Vulnerability
    SolarWinds · Serv-UKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    91.2%Top 0.19%
    80.0priority
  24. CVE-2023-29357Microsoft SharePoint Server Privilege Escalation Vulnerability
    Microsoft · SharePoint ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    >99.9%Top 0.02%
    79.9priority
  25. CVE-2024-4577PHP-CGI OS Command Injection Vulnerability
    PHP Group · PHPKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+10 more
    MITRE CTID mapping of the KEV entry · follow-on activity
    >99.9%Top 0.02%
    79.9priority
  26. CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability
    SonicWall · SMA1000 applianceKEVPublic exploitMedium · 6.6T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    2.8%Top 14%
    79.9priority
  27. CVE-2013-2465Oracle Java SE Unspecified Vulnerability
    Oracle · Java SEKEVRansomwarePublic exploitCritical · 9.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    98.8%Top 0.07%
    79.8priority
  28. CVE-2024-57726SimpleHelp Missing Authorization Vulnerability
    SimpleHelp · SimpleHelpKEVRansomwarePublic exploitCritical · 9.9T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    66.4%Top 0.72%
    79.8priority
  29. CVE-2024-41713Mitel MiCollab Path Traversal Vulnerability
    Mitel · MiCollabKEVRansomwarePublic exploitCritical · 9.1T1068Exploitation for Privilege EscalationT1005Data from Local System
    MITRE CTID mapping of the KEV entry · how it is exploited
    97.2%Top 0.1%
    79.3priority
  30. CVE-2026-71362Adobe Commerce and Magento Incorrect Authorization Vulnerability
    Adobe · Commerce and Magento KEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    90.5%Top 0.2%
    79.3priority
  31. CVE-2022-26923Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    83.5%Top 0.32%
    79.1priority
  32. CVE-2022-41080Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    77.3%Top 0.44%
    79.1priority
  33. CVE-2025-33073Microsoft Windows SMB Client Improper Access Control Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    82.7%Top 0.33%
    79.1priority
  34. CVE-2018-19323GIGABYTE Multiple Products Privilege Escalation Vulnerability
    GIGABYTE · Multiple ProductsKEVRansomwarePublic exploitCritical · 9.8T1068Exploitation for Privilege EscalationT1014Rootkit
    AI mapping from the description · how it is exploited
    8.4%Top 5%
    78.9priority
  35. CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
    MikroTik · RouterOSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    6.4%Top 6.3%
    78.6priority
  36. CVE-2024-49039Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    AI mapping from the description · how it is exploited
    14.2%Top 3.4%
    78.5priority
  37. CVE-2016-7255Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    AI mapping from the description · how it is exploited
    81.0%Top 0.37%
    78.4priority
  38. CVE-2021-40449Microsoft Windows Win32k Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1566PhishingT1059.003Windows Command Shell+6 more
    MITRE CTID mapping of the KEV entry · primary impact
    81.9%Top 0.35%
    78.4priority
  39. CVE-2016-0151Microsoft Windows CSRSS Security Feature Bypass Vulnerability
    Microsoft · Client-Server Run-time Subsystem (CSRSS)KEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    62.8%Top 0.81%
    78.3priority
  40. CVE-2017-0101Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    57.5%Top 0.92%
    78.3priority
  41. CVE-2019-0211Apache HTTP Server Privilege Escalation Vulnerability
    Apache · HTTP ServerKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    65.0%Top 0.75%
    78.3priority
  42. CVE-2022-21882Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    59.2%Top 0.89%
    78.3priority
  43. CVE-2023-4911GNU C Library Buffer Overflow Vulnerability
    GNU · GNU C LibraryKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    63.8%Top 0.78%
    78.3priority
  44. CVE-2024-21338Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    59.8%Top 0.87%
    78.3priority
  45. CVE-2013-3660Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    39.3%Top 1.4%
    78.2priority
  46. CVE-2014-3153Linux Kernel Privilege Escalation Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    AI mapping from the description · how it is exploited
    37.2%Top 1.5%
    78.2priority
  47. CVE-2016-0099Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1134Access Token Manipulation
    AI mapping from the description · how it is exploited
    37.0%Top 1.5%
    78.2priority
  48. CVE-2019-0841Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    41.4%Top 1.3%
    78.2priority
  49. CVE-2021-42287Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
    Microsoft · Active DirectoryKEVRansomwarePublic exploitHigh · 7.5T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    77.2%Top 0.45%
    78.2priority
  50. CVE-2022-21999Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    MITRE CTID mapping of the KEV entry · primary impact
    41.0%Top 1.3%
    78.2priority
  51. CVE-2023-28252Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+5 more
    MITRE CTID mapping of the KEV entry · primary impact
    48.9%Top 1.1%
    78.2priority
  52. CVE-2019-1405Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1559Inter-Process CommunicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    30.2%Top 1.8%
    78.1priority
  53. CVE-2022-37969Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    28.5%Top 1.9%
    78.1priority
  54. CVE-2024-1086Linux Kernel Use-After-Free Vulnerability
    Linux · KernelKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    28.1%Top 1.9%
    78.1priority
  55. CVE-2008-3431Oracle VirtualBox Insufficient Input Validation Vulnerability
    Oracle · VirtualBoxKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    6.9%Top 5.9%
    78.0priority
  56. CVE-2016-3309Microsoft Windows Kernel Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    20.5%Top 2.5%
    78.0priority
  57. CVE-2016-4656Apple iOS Memory Corruption Vulnerability
    Apple · iOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    23.6%Top 2.2%
    78.0priority
  58. CVE-2018-8639Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    22.2%Top 2.3%
    78.0priority
  59. CVE-2024-9474Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
    Palo Alto Networks · PAN-OSKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    93.8%Top 0.16%
    78.0priority
  60. CVE-2018-8440Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    18.5%Top 2.8%
    77.9priority
  61. CVE-2019-1215Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the CVE · uncategorised
    19.3%Top 2.7%
    77.9priority
  62. CVE-2019-1322Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    18.8%Top 2.7%
    77.9priority
  63. CVE-2025-29824Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1134Access Token Manipulation
    AI mapping from the description · how it is exploited
    19.3%Top 2.7%
    77.9priority
  64. CVE-2018-8120Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.0T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    73.3%Top 0.54%
    77.8priority
  65. CVE-2018-8581Microsoft Exchange Server Privilege Escalation Vulnerability
    Microsoft · Exchange ServerKEVRansomwarePublic exploitHigh · 7.4T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    27.6%Top 1.9%
    77.8priority
  66. CVE-2024-30088Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
    Microsoft · Windows KEVRansomwarePublic exploitHigh · 7.0T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    68.2%Top 0.67%
    77.8priority
  67. CVE-2019-1253Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    11.6%Top 4%
    77.7priority
  68. CVE-2024-37085VMware ESXi Authentication Bypass Vulnerability
    VMware · ESXiKEVRansomwarePublic exploitHigh · 7.2T1608.001Upload MalwareT1078Valid Accounts+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    26.8%Top 2%
    77.6priority
  69. CVE-2019-1388Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    8.6%Top 4.9%
    77.5priority
  70. CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    8.9%Top 4.8%
    77.5priority
  71. CVE-2026-46300Linux Kernel Missing Initialization of a Variable Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    16.1%Top 3.1%
    77.5priority
  72. CVE-2019-1064Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    6.9%Top 5.9%
    77.3priority
  73. CVE-2022-24521Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    7.1%Top 5.7%
    77.3priority
  74. CVE-2019-1069Microsoft Task Scheduler Privilege Escalation Vulnerability
    Microsoft · Task SchedulerKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    6.1%Top 6.6%
    77.1priority
  75. CVE-2024-30051Microsoft DWM Core Library Privilege Escalation Vulnerability
    Microsoft · DWM Core LibraryKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · primary impact
    5.7%Top 7%
    77.1priority
  76. CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
    Red Hat · Automatic Bug Reporting ToolKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    5.0%Top 7.8%
    76.9priority
  77. CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
    Microsoft · Windows Ancillary Function Driver for WinSock KEVPublic exploitHigh · 7.0T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    8.6%Top 4.9%
    76.9priority
  78. CVE-2018-19320GIGABYTE Multiple Products Unspecified Vulnerability
    GIGABYTE · Multiple ProductsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1014Rootkit
    AI mapping from the description · how it is exploited
    4.6%Top 8.4%
    76.8priority
  79. CVE-2019-0543Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1134Access Token Manipulation
    AI mapping from the description · how it is exploited
    4.7%Top 8.2%
    76.8priority
  80. CVE-2019-0859Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the CVE · uncategorised
    4.2%Top 9.1%
    76.6priority
  81. CVE-2021-36955Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    4.1%Top 9.3%
    76.6priority
  82. CVE-2022-20775Cisco SD-WAN Path Traversal Vulnerability
    Cisco · SD-WANKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    12.5%Top 3.8%
    76.6priority
  83. CVE-2018-19321GIGABYTE Multiple Products Privilege Escalation Vulnerability
    GIGABYTE · Multiple ProductsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.7%Top 10%
    76.4priority
  84. CVE-2019-1315Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    3.5%Top 11%
    76.3priority
  85. CVE-2021-43226Microsoft Windows Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.3%Top 12%
    76.1priority
  86. CVE-2016-0167Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVRansomwareHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    5.7%Top 7%
    75.9priority
  87. CVE-2022-41073Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwarePublic exploitHigh · 7.8T1078Valid AccountsT1574Hijack Execution Flow+1 more
    MITRE CTID mapping of the KEV entry · primary impact
    2.4%Top 16%
    75.2priority
  88. CVE-2011-1823Android OS Privilege Escalation Vulnerability
    Android · Android OSKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation2 reports
    AI mapping from the description · how it is exploited
    41.4%Top 1.3%
    74.3priority
  89. CVE-2018-19322GIGABYTE Multiple Products Code Execution Vulnerability
    GIGABYTE · Multiple ProductsKEVRansomwarePublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1082System Information Discovery
    AI mapping from the description · how it is exploited
    1.8%Top 21%
    74.2priority
  90. CVE-2023-20273Cisco IOS XE Web UI Command Injection Vulnerability
    Cisco · Cisco IOS XE Web UIKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · primary impact
    92.9%Top 0.17%
    74.1priority
  91. CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    98.1%Top 0.09%
    73.4priority
  92. CVE-2022-22948VMware vCenter Server Incorrect Default File Permissions Vulnerability
    VMware · vCenter ServerKEVPublic exploitMedium · 6.5T1078Valid AccountsT1068Exploitation for Privilege Escalation+1 more · 2 reports
    MITRE CTID mapping of the KEV entry · follow-on activity
    13.3%Top 3.6%
    73.0priority
  93. CVE-2026-20245Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
    Cisco · Catalyst SD-WAN ManagerKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    25.3%Top 2.1%
    73.0priority
  94. CVE-2023-36036Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    16.7%Top 3%
    72.9priority
  95. CVE-2018-14634Linux Kernel Integer Overflow Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    14.7%Top 3.3%
    72.8priority
  96. CVE-2023-36424Microsoft Windows Out-of-Bounds Read Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    AI mapping from the description · how it is exploited
    12.1%Top 3.9%
    72.7priority
  97. CVE-2023-23376Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    10.9%Top 4.1%
    72.6priority
  98. CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management Vulnerability
    Zammad GmbH · ZammadKEVHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    10.9%Top 4.1%
    72.6priority
  99. CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability
    Arista · VeloCloud OrchestratorKEVPublic exploitCritical · 9.9T1078Valid AccountsT1190Exploit Public-Facing Application+1 more
    AI mapping from the description · primary impact
    1.0%Top 36%
    72.5priority
  100. CVE-2026-41091Microsoft Defender Link Following Vulnerability
    Microsoft · DefenderKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    AI mapping from the description · how it is exploited
    8.2%Top 5.1%
    72.4priority
  101. CVE-2014-4113Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation1 report
    MITRE CTID mapping of the CVE · uncategorised
    86.6%Top 0.26%
    72.3priority
  102. CVE-2021-3156Sudo Heap-Based Buffer Overflow Vulnerability
    Sudo · SudoKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    >99.9%Top 0.02%
    72.3priority
  103. CVE-2021-1647Microsoft Defender Remote Code Execution Vulnerability
    Microsoft · DefenderKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    39.7%Top 1.4%
    72.1priority
  104. CVE-2010-0232Microsoft Windows Kernel Exception Handler Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    28.7%Top 1.9%
    72.0priority
  105. CVE-2022-0492Linux Kernel Improper Authentication Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege EscalationT1611Escape to Host
    AI mapping from the description · how it is exploited
    5.5%Top 7.2%
    72.0priority
  106. CVE-2025-39964Linux Kernel Race Condition Vulnerability
    Linux · KernelKEVPublic exploitMedium · 5.5T1068Exploitation for Privilege EscalationT1499.004Application or System Exploitation
    AI mapping from the description · how it is exploited
    1.6%Top 25%
    71.9priority
  107. CVE-2016-5195Linux Kernel Race Condition Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.0T1068Exploitation for Privilege Escalation1 report
    MITRE CTID mapping of the CVE · uncategorised
    83.5%Top 0.32%
    71.7priority
  108. CVE-2016-0165Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    13.7%Top 3.5%
    71.6priority
  109. CVE-2026-21533Microsoft Windows Improper Privilege Management Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    4.2%Top 9.1%
    71.6priority
  110. CVE-2010-4398Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+1 more · 1 report
    AI mapping from the description · primary impact
    8.7%Top 4.9%
    71.4priority
  111. CVE-2019-1385Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    3.6%Top 11%
    71.4priority
  112. CVE-2018-8405Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
    Microsoft · DirectX Graphics Kernel (DXGKRNL)KEVRansomwareHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.4%Top 11%
    71.3priority
  113. CVE-2018-8406Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
    Microsoft · DirectX Graphics Kernel (DXGKRNL)KEVRansomwareHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    3.4%Top 11%
    71.3priority
  114. CVE-2021-28310Microsoft Win32k Privilege Escalation Vulnerability
    Microsoft · Win32kKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
    AI mapping from the description · how it is exploited
    8.4%Top 5%
    71.3priority
  115. CVE-2021-41379Microsoft Windows Installer Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareMedium · 5.5T1078Valid AccountsT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · primary impact
    19.5%Top 2.6%
    71.3priority
  116. CVE-2026-53266Linux Kernel Out-of-Bounds Write Vulnerability
    Linux · KernelKEVPublic exploitHigh · 8.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    0.9%Top 39%
    71.3priority
  117. CVE-2025-62215Microsoft Windows Race Condition Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.0T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    4.5%Top 8.6%
    71.2priority
  118. CVE-2026-106931EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
    EG Secure Solutions · SiteGuard Server EditionKEVHigh · 8.5T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    2.5%Top 15%
    70.7priority
  119. CVE-2025-62221Microsoft Windows Use After Free Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    2.5%Top 15%
    70.4priority
  120. CVE-2020-0638Microsoft Update Notification Manager Privilege Escalation Vulnerability
    Microsoft · Update Notification ManagerKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    2.4%Top 16%
    70.2priority
  121. CVE-2025-47812Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
    Wing FTP Server · Wing FTP ServerKEVPublic exploitCritical · 10.0T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    93.9%Top 0.16%
    70.0priority
  122. CVE-2020-14871Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
    Oracle · Solaris and Zettabyte File System (ZFS)KEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation+1 more
    AI mapping from the description · primary impact
    80.2%Top 0.38%
    69.9priority
  123. CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability
    Fortinet · FortiWebKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell+3 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    99.9%Top 0.03%
    69.9priority
  124. CVE-2025-48595Android Framework Integer Overflow Vulnerability
    Android · FrameworkKEVPublic exploitHigh · 8.4T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    1.9%Top 20%
    69.9priority
  125. CVE-2017-5689Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege…
    Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard ManageabilityKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    92.2%Top 0.18%
    69.8priority
  126. CVE-2019-11708Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
    Mozilla · Firefox and ThunderbirdKEVPublic exploitCritical · 10.0T1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    55.9%Top 0.96%
    69.8priority
  127. CVE-2021-32030ASUS Routers Improper Authentication Vulnerability
    ASUS · RoutersKEVPublic exploitCritical · 9.8T1098Account ManipulationT1068Exploitation for Privilege Escalation+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    99.4%Top 0.06%
    69.8priority
  128. CVE-2024-12987DrayTek Vigor Routers OS Command Injection Vulnerability
    DrayTek · Vigor RoutersKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    98.2%Top 0.09%
    69.8priority
  129. CVE-2024-4885Progress WhatsUp Gold Path Traversal Vulnerability
    Progress · WhatsUp GoldKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    99.3%Top 0.06%
    69.8priority
  130. CVE-2025-54309CrushFTP Unprotected Alternate Channel Vulnerability
    CrushFTP · CrushFTPKEVPublic exploitCritical · 9.8T1068Exploitation for Privilege EscalationT1021Remote Services+1 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    93.5%Top 0.16%
    69.8priority
  131. CVE-2024-54085AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
    AMI · MegaRAC SPxKEVPublic exploitCritical · 9.8T1608.001Upload MalwareT1068Exploitation for Privilege Escalation+3 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    60.7%Top 0.85%
    69.7priority
  132. CVE-2015-1769Microsoft Windows Mount Manager Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitMedium · 6.6T1200Hardware AdditionsT1068Exploitation for Privilege Escalation1 report
    MITRE CTID mapping of the CVE · uncategorised
    4.1%Top 9.3%
    69.6priority
  133. CVE-2023-41974Apple iOS and iPadOS Use-After-Free Vulnerability
    Apple · iOS and iPadOSKEVPublic exploitHigh · 7.8T1204.002Malicious FileT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    2.0%Top 20%
    69.5priority
  134. CVE-2025-24085Apple Multiple Products Use-After-Free Vulnerability
    Apple · Multiple ProductsKEVPublic exploitCritical · 10.0T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    17.5%Top 2.9%
    69.4priority
  135. CVE-2025-4632Samsung MagicINFO 9 Server Path Traversal Vulnerability
    Samsung · MagicINFO 9 ServerKEVPublic exploitCritical · 9.8T1608.001Upload MalwareT1059Command and Scripting Interpreter+2 more
    MITRE CTID mapping of the KEV entry · how it is exploited
    24.1%Top 2.2%
    69.4priority
  136. CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
    Arista · VeloCloud OrchestratorKEVCritical · 10.0T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    1.4%Top 28%
    69.4priority
  137. CVE-2015-2387Microsoft ATM Font Driver Privilege Escalation Vulnerability
    Microsoft · ATM Font DriverKEVHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    MITRE CTID mapping of the CVE · uncategorised
    34.9%Top 1.6%
    69.3priority
  138. CVE-2025-6205Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
    Dassault Systèmes · DELMIA AprisoKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    73.7%Top 0.53%
    69.3priority
  139. CVE-2026-22769Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
    Dell · RecoverPoint for Virtual Machines (RP4VMs)KEVCritical · 10.0T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    13.5%Top 3.6%
    69.3priority
  140. CVE-2026-53362Linux Kernel Unspecified Vulnerability
    Linux · KernelKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    0.7%Top 47%
    69.2priority
  141. CVE-2019-1129Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    1.8%Top 22%
    69.1priority
  142. CVE-2013-6282Linux Kernel Improper Input Validation Vulnerability
    Linux · KernelKEVPublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1005Data from Local System
    AI mapping from the description · how it is exploited
    39.7%Top 1.4%
    68.9priority
  143. CVE-2019-1130Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
    Microsoft · WindowsKEVRansomwareHigh · 7.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    AI mapping from the description · primary impact
    1.7%Top 23%
    68.9priority
  144. CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability
    Microsoft · WindowsKEVHigh · 7.8T1068Exploitation for Privilege Escalation2 reports
    AI mapping from the description · how it is exploited
    14.9%Top 3.3%
    68.9priority
  145. CVE-2023-33538TP-Link Multiple Routers Command Injection Vulnerability
    TP-Link · Multiple RoutersKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    41.6%Top 1.3%
    68.9priority
  146. CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
    Microsoft · WindowsKEVPublic exploitHigh · 8.8T1078Valid AccountsT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · primary impact
    34.2%Top 1.6%
    68.8priority
  147. CVE-2025-0994Trimble Cityworks Deserialization Vulnerability
    Trimble · CityworksKEVPublic exploitHigh · 8.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    MITRE CTID mapping of the KEV entry · how it is exploited
    31.3%Top 1.7%
    68.8priority
  148. CVE-2026-20700Apple Multiple Buffer Overflow Vulnerability
    Apple · Multiple ProductsKEVPublic exploitHigh · 7.8T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    1.7%Top 23%
    68.8priority
  149. CVE-2013-2094Linux Kernel Privilege Escalation Vulnerability
    Linux · KernelKEVPublic exploitHigh · 8.4T1068Exploitation for Privilege Escalation
    AI mapping from the description · how it is exploited
    47.7%Top 1.2%
    68.6priority
  150. CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
    Arm · Mali Graphics Processing Unit (GPU)KEVPublic exploitHigh · 8.8T1068Exploitation for Privilege EscalationT1005Data from Local System
    AI mapping from the description · how it is exploited
    18.5%Top 2.8%
    68.6priority

Passages that support these links

First 40, from the highest-priority CVEs

CVE-2021-34523

ion for Privilege Escalation The ProxyShell elevation of privilege on the Exchange PowerShell Backend (CVE-2021-34523), Windows Background Intelligent Transfer Service (BITS) improperly handling symbolic links (CVE-2020-0787), and abusing the CMSTPLUA COM interface have all been seen as methods of privilege escalation.
LockBit 2.0: How This RaaS Operates and How to Protect Against It unit42.paloaltonetworks.com Original (opens in a new tab) ↗

CVE-2021-34527

Software vulnerabilities, such as PrintNightmare (CVE-2021-1675) and (CVE-2021-34527), may be exploited in an attempt to elevate privileges.
Vice Society: Profiling a Persistent Threat to the Education Sector unit42.paloaltonetworks.com Original (opens in a new tab) ↗

CVE-2020-0796

Exploitation for Privilege Escalation (T1068): CVE-2020-0796, CVE-2019-1458, CVE-2017-0213, CVE-2015-1701
Take a “NetWalk” on the Wild Side mcafee.com Original (opens in a new tab) ↗

CVE-2020-0796

Exploitation for Privilege Exploitation ((T1068) CVE-2020-0796
McAfee Defender’s Blog: NetWalker mcafee.com Original (opens in a new tab) ↗

CVE-2017-0213

Exploitation for Privilege Escalation (T1068): CVE-2020-0796, CVE-2019-1458, CVE-2017-0213, CVE-2015-1701
Take a “NetWalk” on the Wild Side mcafee.com Original (opens in a new tab) ↗

CVE-2017-0213

Exploitation for Privilege Exploitation ((T1068) CVE-2017-0213
McAfee Defender’s Blog: NetWalker mcafee.com Original (opens in a new tab) ↗

CVE-2017-0144

Brute forcing RDP accounts, the dumping of credentials, and the use of *legacy* exploits such as EternalBlue (CVE-2017-0144), are ways to quickly obtain access to one or more privileged accounts.
How Groove Gang is shaking up the Ransomware-as-a-Service market to empower affiliates Intel 471, 9 Sep 2021 Original (opens in a new tab) ↗

CVE-2023-20198

CVE-2023-20273 - Cisco Internetworking Operating System (IOS) XE software web management user interface post-authentication command injection/privilege escalation (commonly chained with CVE-2023-20198 for initial access to achieve code execution as root) [T1068]
Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System cisa.gov Original (opens in a new tab) ↗

CVE-2021-1675

Software vulnerabilities, such as PrintNightmare (CVE-2021-1675) and (CVE-2021-34527), may be exploited in an attempt to elevate privileges.
Vice Society: Profiling a Persistent Threat to the Education Sector unit42.paloaltonetworks.com Original (opens in a new tab) ↗

CVE-2015-1701

Exploitation for Privilege Escalation (T1068): CVE-2020-0796, CVE-2019-1458, CVE-2017-0213, CVE-2015-1701
Take a “NetWalk” on the Wild Side mcafee.com Original (opens in a new tab) ↗

CVE-2015-1701

Exploitation for Privilege Exploitation ((T1068) CVE-2015-1701
McAfee Defender’s Blog: NetWalker mcafee.com Original (opens in a new tab) ↗

CVE-2019-1458

Exploitation for Privilege Escalation (T1068): CVE-2020-0796, CVE-2019-1458, CVE-2017-0213, CVE-2015-1701
Take a “NetWalk” on the Wild Side mcafee.com Original (opens in a new tab) ↗

CVE-2019-1458

Exploitation for Privilege Exploitation ((T1068) CVE-2019-1458
McAfee Defender’s Blog: NetWalker mcafee.com Original (opens in a new tab) ↗

CVE-2020-0787

ion for Privilege Escalation The ProxyShell elevation of privilege on the Exchange PowerShell Backend (CVE-2021-34523), Windows Background Intelligent Transfer Service (BITS) improperly handling symbolic links (CVE-2020-0787), and abusing the CMSTPLUA COM interface have all been seen as methods of privilege escalation.
LockBit 2.0: How This RaaS Operates and How to Protect Against It unit42.paloaltonetworks.com Original (opens in a new tab) ↗

CVE-2015-2291

In addition to these loaders, the attacker also exploits CVE-2015-2291, an Intel driver vulnerability, to load a malicious driver designed to reduce the token integrity of Microsoft Defender.
Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs trendmicro.com Original (opens in a new tab) ↗

CVE-2015-2291

The primary objective of this malware is to disable Microsoft Defender by deploying a malicious kernel mode driver (“bring your own vulnerable driver” or BYOVD method) via exploiting a vulnerable Intel driver (CVE-2015-2291) and then downloading and executing the third-stage payload.
Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs trendmicro.com Original (opens in a new tab) ↗
↑ ↓ chooseEnter openEsc close