Microsoft Windows Server 2008
107 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0584 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0583 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 16 % | ||
| CVE-2019-0582 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 12 % | ||
| CVE-2019-0581 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0580 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0579 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0577 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0576 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 17 % | ||
| CVE-2019-0575 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database En | HIGH 7.8 | 14 % | ||
| CVE-2019-0569 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0554 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0549 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2019-0536 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8641 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.1 % | ||
| CVE-2018-8639 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 8.4 | 22 % | KEV | |
| CVE-2018-8622 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8611 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.8 | 4.2 % | KEV | |
| CVE-2018-8596 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 7.1 % | ||
| CVE-2018-8595 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 6.9 % | ||
| CVE-2018-8514 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Proc | MEDIUM 5.5 | 1.9 % | ||
| CVE-2018-8477 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-8589 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privile | HIGH 7.8 | 3.0 % | KEV | |
| CVE-2018-8565 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Dis | MEDIUM 5.5 | 3.2 % | ||
| CVE-2018-8562 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8553 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 19 % | ||
| CVE-2018-8544 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 8.8 | 48 % | ||
| CVE-2018-8476 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows | CRITICAL 9.8 | 65 % | ||
| CVE-2018-8450 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; x64-based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulner | HIGH 8.8 | 16 % | ||
| CVE-2018-8408 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Informa | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8407 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8494 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 22 % | ||
| CVE-2018-8489 | x64-based Systems Service Pack 2 ; x64-based Systems Service Pack 2 (Server Core installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 8.4 | 4.4 % | ||
| CVE-2018-8486 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulner | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8482 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8481 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player In | LOW 3.1 | 5.0 % | ||
| CVE-2018-8472 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowi | MEDIUM 5.5 | 19 % | ||
| CVE-2018-8453 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 70 % | KEV | |
| CVE-2018-8432 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 20 % | ||
| CVE-2018-8427 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphi | MEDIUM 5.5 | 2.3 % | ||
| CVE-2018-8423 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution | HIGH 7.8 | 32 % | ||
| CVE-2018-8411 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.8 | 3.1 % | ||
| CVE-2018-8333 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager | HIGH 7.0 | 1.9 % | ||
| CVE-2018-8330 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.5 % | ||
| CVE-2018-8320 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." Thi | MEDIUM 4.3 | 4.7 % | ||
| CVE-2018-8475 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code E | HIGH 8.8 | 16 % | ||
| CVE-2018-8468 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." | MEDIUM 4.7 | 12 % | ||
| CVE-2018-8446 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8443 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8442 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8440 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows A | HIGH 7.8 | 19 % | KEV | |
| CVE-2018-8434 | x64-based Systems Service Pack 2 ; x64-based Systems Service Pack 2 (Server Core installation) | An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth | MEDIUM 5.4 | 3.5 % | ||
| CVE-2018-8433 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Grap | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8424 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 13 % | ||
| CVE-2018-8420 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code | HIGH 8.8 | 49 % | ||
| CVE-2018-8419 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8393 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 22 % | ||
| CVE-2018-8392 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-8336 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8332 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k | HIGH 8.8 | 19 % | ||
| CVE-2018-8271 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in | MEDIUM 5.5 | 2.8 % | ||
| CVE-2018-8398 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8397 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka | HIGH 8.8 | 68 % | ||
| CVE-2018-8396 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 4.7 | 2.6 % | ||
| CVE-2018-8394 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8349 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Micros | HIGH 8.8 | 23 % | ||
| CVE-2018-8348 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.4 % | ||
| CVE-2018-8346 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 8.8 | 20 % | ||
| CVE-2018-8345 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "L | HIGH 7.5 | 15 % | ||
| CVE-2018-8344 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-8339 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8314 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vu | MEDIUM 4.7 | 4.2 % | ||
| CVE-2018-8309 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." T | MEDIUM 5.5 | 1.7 % | ||
| CVE-2018-8308 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | MEDIUM 6.6 | 3.9 % | ||
| CVE-2018-8307 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature | MEDIUM 5.3 | 3.8 % | ||
| CVE-2018-8304 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka | MEDIUM 5.9 | 13 % | ||
| CVE-2018-8282 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak | HIGH 7.8 | 1.3 % | ||
| CVE-2018-8206 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server D | HIGH 7.5 | 12 % | ||
| CVE-2018-8225 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, | HIGH 8.1 | 24 % | ||
| CVE-2018-8224 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Eleva | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8207 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 4.7 | 2.5 % | ||
| CVE-2018-8169 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in mem | HIGH 7.0 | 1.2 % | ||
| CVE-2018-1040 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Mod | MEDIUM 5.3 | 7.2 % | ||
| CVE-2018-1036 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This aff | HIGH 7.0 | 1.1 % | ||
| CVE-2018-8174 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem | HIGH 7.5 | 88 % | KEV | |
| CVE-2018-8167 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, a | HIGH 7.0 | 1.0 % | ||
| CVE-2018-8166 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8164 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.8 | 1.5 % | ||
| CVE-2018-8136 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerabi | HIGH 7.8 | 23 % | ||
| CVE-2018-8124 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 1.2 % | ||
| CVE-2018-8120 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k | HIGH 7.0 | 73 % | KEV | |
| CVE-2018-0959 | x64-based Systems Service Pack 2 ; x64-based Systems Service Pack 2 (Server Core installation) | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us | HIGH 7.6 | 9.8 % | ||
| CVE-2018-8116 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Serv | MEDIUM 5.5 | 1.4 % | ||
| CVE-2018-1015 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1013 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1012 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso | HIGH 8.8 | 23 % | ||
| CVE-2018-1008 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; x64-based Systems Service Pack 2 ; … | An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle object | HIGH 7.0 | 1.1 % | ||
| CVE-2018-1003 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; x64-based Systems Service Pack 2 ; … | A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak | HIGH 7.8 | 23 % | ||
| CVE-2018-0976 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends | MEDIUM 5.3 | 4.7 % | ||
| CVE-2018-0975 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 2.9 % | ||
| CVE-2018-0974 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0973 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0972 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0971 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0970 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0969 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to | MEDIUM 5.5 | 3.4 % | ||
| CVE-2018-0960 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information | MEDIUM 5.5 | 1.8 % | ||
| CVE-2018-0887 | 32-bit Systems Service Pack 2 ; 32-bit Systems Service Pack 2 (Server Core installation) ; Itanium-Based Systems Service Pack 2 ; … | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel In | MEDIUM 5.5 | 1.8 % |