Microsoft Windows RT 8.1

126 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2019-0584Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.814 %
CVE-2019-0583Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.816 %
CVE-2019-0582Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.812 %
CVE-2019-0581Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.814 %
CVE-2019-0580Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.817 %
CVE-2019-0579Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.817 %
CVE-2019-0577Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.817 %
CVE-2019-0576Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.817 %
CVE-2019-0575Windows RT 8.1A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database EnHIGH 7.814 %
CVE-2019-0570Windows RT 8.1An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime ElevationHIGH 7.83.0 %
CVE-2019-0569Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2019-0554Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2019-0552Windows RT 8.1An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects WindowsHIGH 8.82.5 %
CVE-2019-0549Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2019-0536Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2018-8641Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akHIGH 7.81.1 %
CVE-2018-8639Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 8.422 %KEV
CVE-2018-8622Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2018-8611Windows RT 8.1An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel ElevaHIGH 7.84.2 %KEV
CVE-2018-8596Windows RT 8.1An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows MEDIUM 6.57.1 %
CVE-2018-8595Windows RT 8.1An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows MEDIUM 6.56.9 %
CVE-2018-8514Windows RT 8.1An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote ProcMEDIUM 5.51.9 %
CVE-2018-8477Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2018-8565Windows RT 8.1An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information DisMEDIUM 5.53.2 %
CVE-2018-8563Windows RT 8.1An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure VulnerMEDIUM 5.51.7 %
CVE-2018-8562Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 7.81.3 %
CVE-2018-8561Windows RT 8.1An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege VulnerHIGH 7.81.2 %
CVE-2018-8553Windows RT 8.1A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft GraphicsHIGH 7.819 %
CVE-2018-8547Windows RT 8.1A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FMEDIUM 5.41.6 %
CVE-2018-8544Windows RT 8.1A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine RemHIGH 8.848 %
CVE-2018-8485Windows RT 8.1An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege VulnerHIGH 7.81.2 %
CVE-2018-8450Windows RT 8.1A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution VulnerHIGH 8.816 %
CVE-2018-8415Windows RT 8.1A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering VuHIGH 7.81.2 %
CVE-2018-8408Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel InformaMEDIUM 5.51.7 %
CVE-2018-8407Windows RT 8.1An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory,MEDIUM 5.51.7 %
CVE-2018-8256Windows RT 8.1A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote CoHIGH 8.823 %
CVE-2018-8494Windows RT 8.1A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote CodeHIGH 8.822 %
CVE-2018-8493Windows RT 8.1An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP IHIGH 7.58.4 %
CVE-2018-8489Windows RT 8.1A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usHIGH 8.44.4 %
CVE-2018-8486Windows RT 8.1An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure VulnerMEDIUM 5.51.7 %
CVE-2018-8484Windows RT 8.1An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "HIGH 7.81.2 %
CVE-2018-8482Windows RT 8.1An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player InLOW 3.15.0 %
CVE-2018-8481Windows RT 8.1An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player InLOW 3.15.0 %
CVE-2018-8472Windows RT 8.1An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowiMEDIUM 5.519 %
CVE-2018-8453Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 7.870 %KEV
CVE-2018-8423Windows RT 8.1A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution HIGH 7.832 %
CVE-2018-8413Windows RT 8.1A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote CodeHIGH 7.846 %
CVE-2018-8411Windows RT 8.1An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affHIGH 7.83.1 %
CVE-2018-8333Windows RT 8.1An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter ManagerHIGH 7.01.9 %
CVE-2018-8330Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.52.5 %
CVE-2018-8475Windows RT 8.1A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code EHIGH 8.816 %
CVE-2018-8468Windows RT 8.1An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." MEDIUM 4.712 %
CVE-2018-8455Windows RT 8.1An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation oHIGH 7.81.1 %
CVE-2018-8446Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.52.8 %
CVE-2018-8444Windows RT 8.1An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requestMEDIUM 5.95.9 %
CVE-2018-8443Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.52.8 %
CVE-2018-8442Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.52.8 %
CVE-2018-8440Windows RT 8.1An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows AHIGH 7.819 %KEV
CVE-2018-8439Windows RT 8.1A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usHIGH 8.44.3 %
CVE-2018-8438Windows RT 8.1A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privMEDIUM 6.87.2 %
CVE-2018-8434Windows RT 8.1An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authMEDIUM 5.43.5 %
CVE-2018-8433Windows RT 8.1An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft GrapMEDIUM 4.72.6 %
CVE-2018-8424Windows RT 8.1An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows MEDIUM 6.513 %
CVE-2018-8420Windows RT 8.1A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote CodeHIGH 8.849 %
CVE-2018-8419Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel InMEDIUM 5.51.7 %
CVE-2018-8410Windows RT 8.1An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows RegisHIGH 7.84.0 %
CVE-2018-8393Windows RT 8.1A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, akHIGH 7.822 %
CVE-2018-8392Windows RT 8.1A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, akHIGH 7.823 %
CVE-2018-8335Windows RT 8.1A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to thHIGH 7.59.0 %
CVE-2018-8332Windows RT 8.1A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k HIGH 8.819 %
CVE-2018-8271Windows RT 8.1An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects inMEDIUM 5.52.8 %
CVE-2018-8405Windows RT 8.1An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "HIGH 7.83.4 %KEV
CVE-2018-8398Windows RT 8.1An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows MEDIUM 6.58.5 %
CVE-2018-8394Windows RT 8.1An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows MEDIUM 6.58.5 %
CVE-2018-8349Windows RT 8.1A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "MicrosHIGH 8.823 %
CVE-2018-8348Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 4.72.4 %
CVE-2018-8345Windows RT 8.1A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LHIGH 7.515 %
CVE-2018-8344Windows RT 8.1A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "MicrosoHIGH 8.823 %
CVE-2018-8343Windows RT 8.1An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length HIGH 7.81.3 %
CVE-2018-8341Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 4.72.9 %
CVE-2018-8339Windows RT 8.1An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading HIGH 7.01.2 %
CVE-2018-8314Windows RT 8.1An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege VuMEDIUM 4.74.2 %
CVE-2018-8313Windows RT 8.1An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of PrivilHIGH 7.81.3 %
CVE-2018-8309Windows RT 8.1A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." TMEDIUM 5.51.7 %
CVE-2018-8308Windows RT 8.1An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel ElevaMEDIUM 6.63.9 %
CVE-2018-8307Windows RT 8.1A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security FeatureMEDIUM 5.33.8 %
CVE-2018-8304Windows RT 8.1A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka MEDIUM 5.913 %
CVE-2018-8282Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akHIGH 7.81.3 %
CVE-2018-8206Windows RT 8.1A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server DHIGH 7.512 %
CVE-2018-8251Windows RT 8.1A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory CoHIGH 7.57.8 %
CVE-2018-8225Windows RT 8.1A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, HIGH 8.124 %
CVE-2018-8210Windows RT 8.1A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution VulnerabiHIGH 7.825 %
CVE-2018-8207Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 4.72.5 %
CVE-2018-8205Windows RT 8.1A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." TMEDIUM 5.51.7 %
CVE-2018-8169Windows RT 8.1An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memHIGH 7.01.2 %
CVE-2018-1040Windows RT 8.1A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity ModMEDIUM 5.37.2 %
CVE-2018-1036Windows RT 8.1An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affHIGH 7.01.1 %
CVE-2018-8174Windows RT 8.1A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine RemHIGH 7.588 %KEV
CVE-2018-8167Windows RT 8.1An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aHIGH 7.01.0 %
CVE-2018-8166Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 7.01.2 %
CVE-2018-8164Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 7.81.5 %
CVE-2018-8136Windows RT 8.1A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution VulnerabiHIGH 7.823 %
CVE-2018-8134Windows RT 8.1An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of PrivilHIGH 7.02.9 %
CVE-2018-8127Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.52.9 %
CVE-2018-8124Windows RT 8.1An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k HIGH 7.01.2 %
CVE-2018-0959Windows RT 8.1A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usHIGH 7.69.8 %
CVE-2018-8116Windows RT 8.1A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of ServMEDIUM 5.51.4 %
CVE-2018-1015Windows RT 8.1A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "MicrosoHIGH 8.823 %
CVE-2018-1013Windows RT 8.1A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "MicrosoHIGH 8.823 %
CVE-2018-1012Windows RT 8.1A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "MicrosoHIGH 8.823 %
CVE-2018-1009Windows RT 8.1An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory, aka "MiHIGH 7.81.2 %
CVE-2018-1008Windows RT 8.1An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objectHIGH 7.01.1 %
CVE-2018-1004Windows RT 8.1A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine RemHIGH 8.819 %
CVE-2018-1003Windows RT 8.1A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, akHIGH 7.823 %
CVE-2018-0976Windows RT 8.1A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sendsMEDIUM 5.34.7 %
CVE-2018-0975Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.52.9 %
CVE-2018-0974Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0973Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0972Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0971Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0970Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0969Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.4 %
CVE-2018-0968Windows RT 8.1An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead toMEDIUM 5.53.5 %
CVE-2018-0960Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationMEDIUM 5.51.8 %
CVE-2018-0957Windows RT 8.1An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authMEDIUM 5.31.6 %
CVE-2018-0887Windows RT 8.1An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel InMEDIUM 5.51.8 %