Microsoft Windows 10 Servers
201 vulnérabilités publiées citent ce produit. Les 200 plus récentes sont listées.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0584 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0583 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 16 % | ||
| CVE-2019-0582 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2019-0581 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0580 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0579 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0577 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0576 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0575 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0574 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 19 % | ||
| CVE-2019-0573 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 20 % | ||
| CVE-2019-0572 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 25 % | ||
| CVE-2019-0571 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 16 % | ||
| CVE-2019-0570 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation | HIGH 7.8 | 3.0 % | ||
| CVE-2019-0569 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0554 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0553 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0552 | | An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows | HIGH 8.8 | 2.5 % | ||
| CVE-2019-0551 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.5 % | ||
| CVE-2019-0550 | version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.5 % | ||
| CVE-2019-0549 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0547 | version 1803 (Server Core Installation) | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka | CRITICAL 9.8 | 71 % | ||
| CVE-2019-0536 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8641 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8639 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 8.4 | 22 % | KEV | |
| CVE-2018-8637 | version 1803 (Server Core Installation) | An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a K | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8634 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka " | HIGH 8.8 | 15 % | ||
| CVE-2018-8626 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Wi | CRITICAL 9.8 | 21 % | ||
| CVE-2018-8612 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values, ak | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-8611 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.8 | 4.2 % | KEV | |
| CVE-2018-8599 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 1.0 % | ||
| CVE-2018-8596 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 7.1 % | ||
| CVE-2018-8595 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 6.9 % | ||
| CVE-2018-8514 | | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Proc | MEDIUM 5.5 | 1.9 % | ||
| CVE-2018-8477 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8584 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 2.7 % | ||
| CVE-2018-8566 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature | MEDIUM 4.6 | 1.1 % | ||
| CVE-2018-8565 | | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Dis | MEDIUM 5.5 | 3.2 % | ||
| CVE-2018-8562 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8561 | | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8554 | version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8547 | | A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD F | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8544 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 48 % | ||
| CVE-2018-8485 | | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8476 | | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows | CRITICAL 9.8 | 65 % | ||
| CVE-2018-8454 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Ser | MEDIUM 5.5 | 3.3 % | ||
| CVE-2018-8450 | | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner | HIGH 8.8 | 16 % | ||
| CVE-2018-8417 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScr | MEDIUM 5.3 | 2.0 % | ||
| CVE-2018-8415 | | A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vu | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8408 | | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8407 | | An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8256 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co | HIGH 8.8 | 23 % | ||
| CVE-2018-8506 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Wi | MEDIUM 5.5 | 4.4 % | ||
| CVE-2018-8497 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8495 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabil | HIGH 7.5 | 51 % | ||
| CVE-2018-8494 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 22 % | ||
| CVE-2018-8493 | | An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP I | HIGH 7.5 | 8.4 % | ||
| CVE-2018-8492 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8490 | version 1709 (Server Core Installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.1 % | ||
| CVE-2018-8489 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.4 % | ||
| CVE-2018-8486 | | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8484 | | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8482 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8481 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8472 | | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi | MEDIUM 5.5 | 19 % | ||
| CVE-2018-8453 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 70 % | KEV | |
| CVE-2018-8423 | | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution | HIGH 7.8 | 32 % | ||
| CVE-2018-8413 | | A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code | HIGH 7.8 | 46 % | ||
| CVE-2018-8411 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.8 | 3.1 % | ||
| CVE-2018-8333 | | An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager | HIGH 7.0 | 1.9 % | ||
| CVE-2018-8330 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.5 % | ||
| CVE-2018-8329 | version 1803 (Server Core Installation) | An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8320 | | A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." Thi | MEDIUM 4.3 | 4.7 % | ||
| CVE-2018-8475 | | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E | HIGH 8.8 | 16 % | ||
| CVE-2018-8468 | | An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." | MEDIUM 4.7 | 12 % | ||
| CVE-2018-8462 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8455 | | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8449 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulner | LOW 3.3 | 3.1 % | ||
| CVE-2018-8446 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8445 | version 1803 (Server Core Installation) | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8443 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8442 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8441 | version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux E | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8440 | | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 19 % | KEV | |
| CVE-2018-8439 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.3 % | ||
| CVE-2018-8438 | | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.8 | 7.2 % | ||
| CVE-2018-8437 | version 1803 (Server Core Installation) | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.2 | 2.1 % | ||
| CVE-2018-8436 | version 1803 (Server Core Installation) | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.2 | 2.1 % | ||
| CVE-2018-8435 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V | MEDIUM 4.2 | 1.4 % | ||
| CVE-2018-8434 | | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 5.4 | 3.5 % | ||
| CVE-2018-8433 | | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Grap | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8424 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 13 % | ||
| CVE-2018-8420 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 49 % | ||
| CVE-2018-8419 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8410 | | An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Regis | HIGH 7.8 | 4.0 % | ||
| CVE-2018-8393 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 22 % | ||
| CVE-2018-8392 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-8337 | version 1709 (Server Core Installation) | A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-8335 | | A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to th | HIGH 7.5 | 9.0 % | ||
| CVE-2018-8332 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k | HIGH 8.8 | 19 % | ||
| CVE-2018-8271 | | An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-0965 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 5.1 % | ||
| CVE-2018-8414 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Ex | HIGH 8.8 | 73 % | KEV | |
| CVE-2018-8406 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 3.4 % | KEV | |
| CVE-2018-8405 | | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 3.4 % | KEV | |
| CVE-2018-8404 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8401 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 2.1 % | ||
| CVE-2018-8400 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 2.1 % | ||
| CVE-2018-8399 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8398 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8394 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8350 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remot | HIGH 8.8 | 20 % | ||
| CVE-2018-8349 | | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros | HIGH 8.8 | 23 % | ||
| CVE-2018-8348 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.4 % | ||
| CVE-2018-8347 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symb | HIGH 7.8 | 1.4 % | ||
| CVE-2018-8345 | | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 7.5 | 15 % | ||
| CVE-2018-8344 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-8343 | | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8341 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.9 % | ||
| CVE-2018-8340 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authenticat | MEDIUM 6.5 | 7.9 % | ||
| CVE-2018-8339 | | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8204 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-8200 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-0952 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Dia | HIGH 7.8 | 6.2 % | ||
| CVE-2018-8313 | | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8309 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8308 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | MEDIUM 6.6 | 3.9 % | ||
| CVE-2018-8307 | | A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature | MEDIUM 5.3 | 3.8 % | ||
| CVE-2018-8304 | | A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka | MEDIUM 5.9 | 13 % | ||
| CVE-2018-8282 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8222 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8206 | | A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D | HIGH 7.5 | 12 % | ||
| CVE-2018-8251 | | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Co | HIGH 7.5 | 7.8 % | ||
| CVE-2018-8239 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 5.5 | 57 % | ||
| CVE-2018-8233 | version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.4 % | ||
| CVE-2018-8231 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol St | HIGH 8.1 | 16 % | ||
| CVE-2018-8226 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. | HIGH 7.5 | 14 % | ||
| CVE-2018-8225 | | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, | HIGH 8.1 | 24 % | ||
| CVE-2018-8221 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8219 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "H | HIGH 8.8 | 1.1 % | ||
| CVE-2018-8218 | version 1709 (Server Core Installation) | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | HIGH 7.7 | 7.7 % | ||
| CVE-2018-8215 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8214 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows De | HIGH 7.0 | 3.2 % | ||
| CVE-2018-8213 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 8.4 % | ||
| CVE-2018-8212 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.2 % | ||
| CVE-2018-8211 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8210 | | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 25 % | ||
| CVE-2018-8209 | version 1709 (Server Core Installation) | An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative use | HIGH 8.0 | 2.7 % | ||
| CVE-2018-8208 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows De | HIGH 7.0 | 3.1 % | ||
| CVE-2018-8207 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8205 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8201 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 4.5 | 1.9 % | ||
| CVE-2018-8175 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of Service | MEDIUM 6.5 | 7.2 % | ||
| CVE-2018-8169 | | An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in mem | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8140 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "C | MEDIUM 6.8 | 1.7 % | ||
| CVE-2018-8121 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 4.7 | 1.5 % | ||
| CVE-2018-1040 | | A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Mod | MEDIUM 5.3 | 7.2 % | ||
| CVE-2018-1036 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.0 | 1.1 % | ||
| CVE-2018-0982 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.0 | 2.5 % | ||
| CVE-2018-8142 | version 1709 (Server Core Installation) | A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerabi | MEDIUM 5.3 | 1.3 % | ||
| CVE-2018-8174 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 7.5 | 88 % | KEV | |
| CVE-2018-8170 | version 1709 (Server Core Installation) | An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevat | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8167 | | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8166 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8165 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8164 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.5 % | ||
| CVE-2018-8141 | version 1709 (Server Core Installation) | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8136 | | A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 23 % | ||
| CVE-2018-8134 | | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.0 | 2.9 % | ||
| CVE-2018-8132 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-8129 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-8127 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-8124 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-0961 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V | HIGH 7.6 | 3.1 % | ||
| CVE-2018-0959 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 7.6 | 9.8 % | ||
| CVE-2018-0958 | version 1709 (Server Core Installation) ; version 1803 (Server Core Installation) | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-0854 | version 1709 (Server Core Installation) | A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-1035 | version 1709 (Server Core Installation) | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.3 % | ||
| CVE-2018-8116 | | A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Serv | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-1015 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1013 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1012 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1009 | | An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Mi | HIGH 7.8 | 1.2 % | ||
| CVE-2018-1008 | | An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle object | HIGH 7.0 | 1.1 % | ||
| CVE-2018-0976 | | A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends | MEDIUM 5.3 | 4.7 % | ||
| CVE-2018-0975 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-0974 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0973 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0972 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0971 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0970 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0969 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0968 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.5 % | ||
| CVE-2018-0966 | version 1709 (Server Core Installation) | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulner | LOW 3.3 | 2.3 % | ||
| CVE-2018-0964 | version 1709 (Server Core Installation) | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 6.1 | 1.6 % | ||
| CVE-2018-0963 | version 1709 (Server Core Installation) | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o | HIGH 7.8 | 1.2 % | ||
| CVE-2018-0960 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-0957 | | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 5.3 | 1.6 % | ||
| CVE-2018-0956 | version 1709 (Server Core Installation) | A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. | HIGH 7.5 | 14 % | ||
| CVE-2018-0890 | version 1709 (Server Core Installation) | A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory S | MEDIUM 5.3 | 4.2 % |