Archive

14 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /14 December 2018 →

All Critical High Medium Low Exploited only Public exploit

157 results · Feed

Unscored —

CVE-2018-8450 EPSS 16%

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote …

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8578

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structu…

Microsoft Microsoft SharePoint

Nov 14, 2018
Unscored —

CVE-2018-8602

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided …

Microsoft Team

Nov 14, 2018
High 7.5

CVE-2018-8543 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8471

An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handl…

Microsoft Windows Server 2019 Windows Server 2016 Windows 8.1 Windows

Nov 14, 2018
Unscored —

CVE-2018-8558

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings con…

Microsoft Microsoft Office Office

Nov 14, 2018
Unscored —

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to…

Microsoft Microsoft Dynamics 365

Nov 14, 2018
Unscored —

CVE-2018-8605

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanit…

Nov 14, 2018
Unscored —

CVE-2018-8607

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanit…

Microsoft Microsoft Dynamics 365

Nov 14, 2018
High 7.5

CVE-2018-8541 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8547

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Fede…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
High 7.5

CVE-2018-8555 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8551 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8550 Public exploit

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabil…

Nov 14, 2018
Unscored —

CVE-2018-8408

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializ…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
High 7.5

CVE-2018-8556 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Unscored —

CVE-2018-8584 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8554

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows 10 Windows 10 Servers Windows

Nov 14, 2018
Unscored —

CVE-2018-8572

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Server Microsoft SharePoint

Nov 14, 2018
Unscored —

CVE-2018-8544 Public exploit EPSS 48%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8562

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8417

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8570 EPSS 14%

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

Microsoft Internet Explorer 11

Nov 14, 2018
Unscored —

CVE-2018-8574 EPSS 19%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office Microsoft Excel

Nov 14, 2018
Unscored —

CVE-2018-8539 EPSS 19%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server

Nov 14, 2018
Medium 5.4

CVE-2018-8568

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially …

Microsoft Microsoft SharePoint Server Microsoft SharePoint

Nov 14, 2018
Unscored —

CVE-2018-8454

An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, a…

Microsoft Windows Server 2019 Windows 10 Windows 10 Servers Windows

Nov 14, 2018
High 7.5

CVE-2018-8588 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
Medium 6.5

CVE-2018-8416

Tampering vulnerability in .NET Core

A tampering vulnerability exists when .NET Core improperly handles specially crafted files, aka ".NET Core Tampering Vulnerability." This affects .NET Core 2.1.

Microsoft .NET Core Microsoft.NETCore.App mono Ubuntu NuGet

Nov 14, 2018
Unscored —

CVE-2018-8573 EPSS 19%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Office Microsoft Word

Nov 14, 2018
Unscored —

CVE-2018-8576 EPSS 19%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Nov 14, 2018
Unscored —

CVE-2018-8575 EPSS 20%

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in …

Microsoft Office Microsoft Project Microsoft Project Server

Nov 14, 2018
Unscored —

CVE-2018-8415

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft Po…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8563

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…

Microsoft Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows

Nov 14, 2018
Unscored —

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Informa…

Microsoft Microsoft Office Office

Nov 14, 2018