Microsoft Windows 10
214 published vulnerabilities name this product. The 200 most recent are listed.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-6769 | 10.0.0 | Medium to High Integrity Privilege Escalation in Microsoft Windows | HIGH 8.4 | 1.1 % | ||
| CVE-2024-6768 | 10.0.0 | Denial of Service in CLFS.sys | MEDIUM 6.8 | 2.5 % | ||
| CVE-2019-0584 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0583 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 16 % | ||
| CVE-2019-0582 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2019-0581 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0580 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0579 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0577 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0576 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0575 | | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0574 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 19 % | ||
| CVE-2019-0573 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 20 % | ||
| CVE-2019-0572 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 25 % | ||
| CVE-2019-0571 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data S | HIGH 7.8 | 16 % | ||
| CVE-2019-0570 | | An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation | HIGH 7.8 | 3.0 % | ||
| CVE-2019-0569 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0554 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0553 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0552 | | An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows | HIGH 8.8 | 2.5 % | ||
| CVE-2019-0551 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.5 % | ||
| CVE-2019-0550 | Version 1803 for 32-bit Systems ; Version 1803 for ARM64-based Systems ; Version 1803 for x64-based Systems ; … | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.5 % | ||
| CVE-2019-0549 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0547 | Version 1803 for 32-bit Systems ; Version 1803 for ARM64-based Systems ; Version 1803 for x64-based Systems | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka | CRITICAL 9.8 | 71 % | ||
| CVE-2019-0536 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8649 | Version 1809 for 32-bit Systems ; Version 1809 for ARM64-based Systems ; Version 1809 for x64-based Systems | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8641 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8639 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 8.4 | 22 % | KEV | |
| CVE-2018-8638 | Version 1809 for 32-bit Systems ; Version 1809 for ARM64-based Systems ; Version 1809 for x64-based Systems | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8637 | Version 1803 for 32-bit Systems ; Version 1803 for ARM64-based Systems ; Version 1803 for x64-based Systems ; … | An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a K | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8634 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka " | HIGH 8.8 | 15 % | ||
| CVE-2018-8626 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Wi | CRITICAL 9.8 | 21 % | ||
| CVE-2018-8612 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values, ak | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-8611 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.8 | 4.2 % | KEV | |
| CVE-2018-8599 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper | HIGH 7.8 | 1.0 % | ||
| CVE-2018-8596 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 7.1 % | ||
| CVE-2018-8595 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 6.9 % | ||
| CVE-2018-8514 | | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Proc | MEDIUM 5.5 | 1.9 % | ||
| CVE-2018-8477 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8592 | Version 1809 for 32-bit Systems ; Version 1809 for ARM64-based Systems ; Version 1809 for x64-based Systems | An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc, aka "Windows El | MEDIUM 6.4 | 1.3 % | ||
| CVE-2018-8584 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 2.7 % | ||
| CVE-2018-8566 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature | MEDIUM 4.6 | 1.1 % | ||
| CVE-2018-8565 | | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Dis | MEDIUM 5.5 | 3.2 % | ||
| CVE-2018-8562 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8561 | | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8554 | Version 1803 for 32-bit Systems ; Version 1803 for x64-based Systems ; Version 1809 for 32-bit Systems ; … | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8553 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 19 % | ||
| CVE-2018-8547 | | A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD F | MEDIUM 5.4 | 1.6 % | ||
| CVE-2018-8544 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 48 % | ||
| CVE-2018-8485 | | An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulner | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8471 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory, | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8454 | Version 1709 for 32-bit Systems ; Version 1709 for ARM64-based Systems ; Version 1709 for x64-based Systems ; … | An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Ser | MEDIUM 5.5 | 3.3 % | ||
| CVE-2018-8450 | | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner | HIGH 8.8 | 16 % | ||
| CVE-2018-8417 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScr | MEDIUM 5.3 | 2.0 % | ||
| CVE-2018-8415 | | A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vu | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8408 | | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8407 | | An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8256 | | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Co | HIGH 8.8 | 23 % | ||
| CVE-2018-8506 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems ; Version 1803 for 32-bit Systems ; … | An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Wi | MEDIUM 5.5 | 4.4 % | ||
| CVE-2018-8497 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8495 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerabil | HIGH 7.5 | 51 % | ||
| CVE-2018-8494 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 22 % | ||
| CVE-2018-8493 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP I | HIGH 7.5 | 8.4 % | ||
| CVE-2018-8492 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8490 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1709 for x64-based Systems ; … | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.1 % | ||
| CVE-2018-8489 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.4 % | ||
| CVE-2018-8486 | | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8484 | | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8482 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8481 | | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8472 | | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi | MEDIUM 5.5 | 19 % | ||
| CVE-2018-8453 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 70 % | KEV | |
| CVE-2018-8432 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 20 % | ||
| CVE-2018-8423 | | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution | HIGH 7.8 | 32 % | ||
| CVE-2018-8413 | | A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code | HIGH 7.8 | 46 % | ||
| CVE-2018-8411 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.8 | 3.1 % | ||
| CVE-2018-8333 | | An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager | HIGH 7.0 | 1.9 % | ||
| CVE-2018-8330 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.5 % | ||
| CVE-2018-8329 | Version 1803 for 32-bit Systems ; Version 1803 for x64-based Systems | An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8320 | | A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." Thi | MEDIUM 4.3 | 4.7 % | ||
| CVE-2018-8475 | | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E | HIGH 8.8 | 16 % | ||
| CVE-2018-8468 | | An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." | MEDIUM 4.7 | 12 % | ||
| CVE-2018-8462 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.2 % | ||
| CVE-2018-8455 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation o | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8449 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulner | LOW 3.3 | 3.1 % | ||
| CVE-2018-8446 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8445 | Version 1803 for 32-bit Systems ; Version 1803 for x64-based Systems | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8444 | 32-bit Systems ; x64-based Systems | An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain request | MEDIUM 5.9 | 5.9 % | ||
| CVE-2018-8443 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8442 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8441 | Version 1803 for 32-bit Systems ; Version 1803 for x64-based Systems | An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux E | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8440 | | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 19 % | KEV | |
| CVE-2018-8439 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1709 for x64-based Systems ; … | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.3 % | ||
| CVE-2018-8438 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.8 | 7.2 % | ||
| CVE-2018-8437 | Version 1803 for x64-based Systems | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.2 | 2.1 % | ||
| CVE-2018-8436 | Version 1803 for x64-based Systems | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | MEDIUM 6.2 | 2.1 % | ||
| CVE-2018-8435 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1709 for x64-based Systems ; … | A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V | MEDIUM 4.2 | 1.4 % | ||
| CVE-2018-8434 | | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 5.4 | 3.5 % | ||
| CVE-2018-8433 | | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Grap | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8424 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 13 % | ||
| CVE-2018-8420 | | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 49 % | ||
| CVE-2018-8419 | | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8410 | | An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Regis | HIGH 7.8 | 4.0 % | ||
| CVE-2018-8393 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 22 % | ||
| CVE-2018-8392 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-8337 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems | A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-8335 | | A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to th | HIGH 7.5 | 9.0 % | ||
| CVE-2018-8332 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k | HIGH 8.8 | 19 % | ||
| CVE-2018-8271 | | An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-0965 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1803 for x64-based Systems | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 5.1 % | ||
| CVE-2018-8414 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Ex | HIGH 8.8 | 73 % | KEV | |
| CVE-2018-8406 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 3.4 % | KEV | |
| CVE-2018-8405 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 3.4 % | KEV | |
| CVE-2018-8404 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8401 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 2.1 % | ||
| CVE-2018-8400 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems ; Version 1803 for 32-bit Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 2.1 % | ||
| CVE-2018-8399 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8398 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8394 | | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8350 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remot | HIGH 8.8 | 20 % | ||
| CVE-2018-8349 | | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros | HIGH 8.8 | 23 % | ||
| CVE-2018-8348 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.4 % | ||
| CVE-2018-8347 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symb | HIGH 7.8 | 1.4 % | ||
| CVE-2018-8345 | | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 7.5 | 15 % | ||
| CVE-2018-8344 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-8343 | | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8341 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.9 % | ||
| CVE-2018-8339 | | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8253 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems | An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Co | MEDIUM 4.6 | 1.9 % | ||
| CVE-2018-8204 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-8200 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-0952 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Dia | HIGH 7.8 | 6.2 % | ||
| CVE-2018-8314 | | An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vu | MEDIUM 4.7 | 4.2 % | ||
| CVE-2018-8313 | | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8309 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8308 | | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | MEDIUM 6.6 | 3.9 % | ||
| CVE-2018-8307 | | A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature | MEDIUM 5.3 | 3.8 % | ||
| CVE-2018-8304 | | A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka | MEDIUM 5.9 | 13 % | ||
| CVE-2018-8282 | | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8222 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8206 | | A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D | HIGH 7.5 | 12 % | ||
| CVE-2018-8251 | | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Co | HIGH 7.5 | 7.8 % | ||
| CVE-2018-8239 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 5.5 | 57 % | ||
| CVE-2018-8233 | Version 1803 for 32-bit Systems ; Version 1803 for x64-based Systems | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.4 % | ||
| CVE-2018-8231 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol St | HIGH 8.1 | 16 % | ||
| CVE-2018-8226 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. | HIGH 7.5 | 14 % | ||
| CVE-2018-8225 | | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, | HIGH 8.1 | 24 % | ||
| CVE-2018-8221 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8219 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1709 for x64-based Systems ; … | An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "H | HIGH 8.8 | 1.1 % | ||
| CVE-2018-8218 | Version 1709 for x64-based Systems | A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a priv | HIGH 7.7 | 7.7 % | ||
| CVE-2018-8217 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8216 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8215 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8214 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows De | HIGH 7.0 | 3.2 % | ||
| CVE-2018-8213 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 8.4 % | ||
| CVE-2018-8212 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.2 % | ||
| CVE-2018-8211 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 5.3 | 2.1 % | ||
| CVE-2018-8210 | | A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 25 % | ||
| CVE-2018-8209 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative use | HIGH 8.0 | 2.7 % | ||
| CVE-2018-8208 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows De | HIGH 7.0 | 3.1 % | ||
| CVE-2018-8207 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8205 | | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8201 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShe | MEDIUM 4.5 | 1.9 % | ||
| CVE-2018-8175 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems ; Version 1803 for 32-bit Systems ; … | An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of Service | MEDIUM 6.5 | 7.2 % | ||
| CVE-2018-8169 | | An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in mem | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8140 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems ; Version 1803 for 32-bit Systems ; … | An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "C | MEDIUM 6.8 | 1.7 % | ||
| CVE-2018-8121 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 4.7 | 1.5 % | ||
| CVE-2018-1040 | | A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Mod | MEDIUM 5.3 | 7.2 % | ||
| CVE-2018-1036 | | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.0 | 1.1 % | ||
| CVE-2018-0982 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.0 | 2.5 % | ||
| CVE-2018-8142 | Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; Version 1703 for 32-bit Systems ; … | A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerabi | MEDIUM 5.3 | 1.3 % | ||
| CVE-2018-8174 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 7.5 | 88 % | KEV | |
| CVE-2018-8170 | Version 1703 for 32-bit Systems ; Version 1703 for x64-based Systems ; Version 1709 for 32-bit Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevat | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8167 | | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8166 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8165 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka " | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8164 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.5 % | ||
| CVE-2018-8141 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8136 | | A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 23 % | ||
| CVE-2018-8134 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privil | HIGH 7.0 | 2.9 % | ||
| CVE-2018-8132 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-8129 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-8127 | | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-8124 | | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-0961 | Version 1607 for x64-based Systems ; Version 1703 for x64-based Systems ; Version 1709 for x64-based Systems ; … | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data, aka "Hyper-V | HIGH 7.6 | 3.1 % | ||
| CVE-2018-0959 | | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 7.6 | 9.8 % | ||
| CVE-2018-0958 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.4 % | ||
| CVE-2018-0854 | 32-bit Systems ; Version 1607 for 32-bit Systems ; Version 1607 for x64-based Systems ; … | A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows | MEDIUM 5.3 | 1.5 % | ||
| CVE-2018-1035 | Version 1709 for 32-bit Systems ; Version 1709 for x64-based Systems | A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur | MEDIUM 5.3 | 1.3 % | ||
| CVE-2018-8116 | | A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Serv | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-1015 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1013 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1012 | | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1009 | | An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "Mi | HIGH 7.8 | 1.2 % | ||
| CVE-2018-1008 | | An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle object | HIGH 7.0 | 1.1 % | ||
| CVE-2018-1004 | | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 19 % | ||
| CVE-2018-1003 | | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-0976 | | A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends | MEDIUM 5.3 | 4.7 % | ||
| CVE-2018-0975 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-0974 | | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % |