DriverShield - CVE Library for Vulnerable Windows Kernel Drivers

Catalog of CVEs associated with vulnerable Windows kernel drivers, with affected driver entries, sample hash lists, MITRE techniques, and observed scan history.

Catalog of CVEs in Vulnerable Kernel Drivers

CVE entries published against Windows kernel drivers that have been used (or are reusable) in BYOVD attacks. Each entry links to the affected driver families, known sample hashes, and any observed scan history on this platform.

CVE-2018-16712
CVE-2013-3956
CVE-2023-1453
CVE-2019-12280
CVE-2025-61155
CVE-2025-45737
CVE-2026-29923
CVE-2026-3609
CVE-2022-42046
CVE-2026-56129
CVE-2023-21768
CVE-2015-2291
CVE-2022-3699
CVE-2019-6494
CVE-2026-36425
CVE-2022-26522
CVE-2022-26523
CVE-2024-41498
CVE-2026-8501
CVE-2024-22830
CVE-2023-52271
CVE-2024-26229
CVE-2024-26506
CVE-2018-5713
CVE-2019-18845
CVE-2017-9769
CVE-2009-0824
CVE-2007-5633
CVE-2020-17382
CVE-2020-15368
CVE-2025-8061

See the methodology for how vulnerable drivers are detected, and the signer atlas to pivot by the code-signing certificate used to ship them.