Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
High 7.8CVE-2018-8406 Exploited · Ransomware
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
KEV Mar 28, 2022 -
Unscored —
An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly valid…
-
Unscored —
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoof…
-
Unscored —
An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access infor…
-
Unscored —CVE-2018-8346 EPSS 20%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
High 7.5CVE-2018-8390 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, …
-
High 7.8CVE-2018-8405 Exploited · Ransomware
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…
KEV Mar 28, 2022 -
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft E…
-
Unscored —CVE-2018-8387 EPSS 10%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —CVE-2018-8273 EPSS 31%
A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affecte…
-
Unscored —
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
High 7.5CVE-2018-8371 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer…
-
Unscored —CVE-2018-8316 EPSS 14%
A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading exec…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft E…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —CVE-2018-8377 EPSS 10%
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an unini…
-
High 7.5CVE-2018-8372 EPSS 26%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser El…
-
Unscored —CVE-2018-8376 EPSS 19%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…
-
Unscored —CVE-2018-8382 EPSS 13%
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
Unscored —CVE-2018-8403 EPSS 13%
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsof…
-
Unscored —CVE-2018-8349 EPSS 23%
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized…
-
Unscored —
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sa…
-
High 7.5CVE-2018-8381 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles mul…
-
Unscored —CVE-2018-8375 EPSS 17%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing …
-
Unscored —
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
-
High 7.5CVE-2018-8266 EPSS 29%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle pa…
-
High 7.5CVE-2018-8359 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, C…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…
-
Unscored —
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code in…