Archive

14 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /14 April 2018 →

All Critical High Medium Low Exploited only Public exploit

144 results · Feed

Unscored —

CVE-2018-0884

Windows Scripting Host (WSH) in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, ver…

Microsoft Windows Scripting Host Windows

Mar 14, 2018
Unscored —

CVE-2018-0814

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0898

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
High 7.5

CVE-2018-0874 EPSS 16%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerab…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0941 EPSS 12%

Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an info…

Microsoft Exchange Server

Mar 14, 2018
Low 3.1

CVE-2018-0878 Public exploit EPSS 21%

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windo…

Microsoft Windows Remote Assistance Windows

Mar 14, 2018
High 7.5

CVE-2018-0873 EPSS 15%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability"…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0888

The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…

Microsoft Hyper-V Network SwitchHyper-V Network Switch Virtualization

Mar 14, 2018
High 7.5

CVE-2018-0937 EPSS 15%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1703 and 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0883 EPSS 15%

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 20…

Microsoft Windows Shell Windows

Mar 14, 2018
Unscored —

CVE-2018-0935 Public exploit EPSS 56%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Internet Explorer

Mar 14, 2018
Unscored —

CVE-2018-0899

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0922 EPSS 18%

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Micros…

Microsoft Microsoft Office

Mar 14, 2018
Unscored —

CVE-2018-0929

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

Microsoft Internet Explorer

Mar 14, 2018
Unscored —

CVE-2018-0912

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

Microsoft Microsoft SharePoint

Mar 14, 2018
Unscored —

CVE-2018-0815

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows an…

Microsoft Windows Windows

Mar 14, 2018
Unscored —

CVE-2018-0910

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

Microsoft Microsoft SharePoint

Mar 14, 2018
Unscored —

CVE-2018-0816

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…

Microsoft Windows Windows

Mar 14, 2018
Unscored —

CVE-2018-0947

Microsoft SharePoint Foundation 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privileg…

Microsoft Microsoft SharePoint

Mar 14, 2018
Unscored —

CVE-2018-0893 EPSS 27%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to…

Microsoft Microsoft Edge Browsers

Mar 14, 2018
Unscored —

CVE-2018-0868

Windows Installer in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve…

Microsoft Windows Installer Windows

Mar 14, 2018
Unscored —

CVE-2018-0916

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

Microsoft Microsoft SharePoint

Mar 14, 2018
Unscored —

CVE-2018-0944

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vuln…

Microsoft Microsoft SharePoint

Mar 14, 2018
High 7.5

CVE-2018-0936 EPSS 15%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 1709 allow remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872, CVE-2018-0873, CVE…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0879

Microsoft Edge in Windows 10 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Micros…

Microsoft Microsoft Edge Browsers

Mar 14, 2018
Unscored —

CVE-2018-0940

Microsoft Exchange Outlook Web Access (OWA) in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsof…

Microsoft Microsoft Exchange Outlook Web Access (OWA)

Mar 14, 2018
High 7.5

CVE-2018-0875

.NET Core Denial of Service Vulnerability

.NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".

Microsoft .NET Core Microsoft.NETCore.Jit NuGet

Mar 14, 2018
Unscored —

CVE-2018-0813

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0983

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, vers…

Microsoft Windows Storage Services Windows

Mar 14, 2018
Unscored —

CVE-2018-0924

Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Mi…

Microsoft Exchange Server

Mar 14, 2018
Unscored —

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, …

Microsoft Windows Windows

Mar 14, 2018
Unscored —

CVE-2018-0885

The Microsoft Hyper-V Network Switch in 64-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server…

Microsoft Microsoft Hyper-V Network Switch Virtualization

Mar 14, 2018
Unscored —

CVE-2018-0914

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulne…

Microsoft Microsoft SharePoint

Mar 14, 2018
Unscored —

CVE-2018-0926

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0894 Public exploit

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
High 7.5

CVE-2018-0930 EPSS 12%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Microsoft Windows 10 1709 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0872,…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0886 Public exploit EPSS 82%

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 …

Microsoft Windows Windows

Mar 14, 2018
Unscored —

CVE-2018-0932

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve…

Microsoft Internet Explorer, Microsoft Edge Browsers

Mar 14, 2018
Unscored —

CVE-2018-0919 EPSS 12%

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Micros…

Microsoft Microsoft Office

Mar 14, 2018
High 7.5

CVE-2018-0934 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018