Platform

Windows

10,645 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,645 results · Feed

Unscored —

CVE-2018-8649

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Serv…

Microsoft Windows Server 2019 Windows 10 Windows

Dec 12, 2018
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
Unscored —

CVE-2018-8638

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…

Microsoft Windows Server 2019 Windows 10 Windows

Dec 12, 2018
Unscored —

CVE-2018-8595

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8626 EPSS 21%

A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly han…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8596

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8622

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows

Dec 12, 2018
Unscored —

CVE-2018-8477

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windo…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
Unscored —

CVE-2018-8652

A Cross-site Scripting (XSS) vulnerability exists when Windows Azure Pack does not properly sanitize user-provided inpu…

Microsoft Windows Azure Pack Rollup 13.1 Windows

Dec 12, 2018
Unscored —

CVE-2018-7112

The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of pr…

Hewlett Packard Enterprise Windows firmware installer for Gen9, Gen8, G7,and G6 HPE servers Windows

Dec 3, 2018
High 8.4

CVE-2018-1897

IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow,…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 30, 2018
Unscored —

CVE-2018-3696

Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potent…

Intel Intel RAID Web Console v3 for Windows Windows

Nov 14, 2018
Unscored —

CVE-2018-8476 EPSS 65%

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8256 EPSS 23%

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8553 EPSS 19%

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
High 7.8

CVE-2018-8589 Exploited

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k…

Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows

Nov 14, 2018
KEV May 23, 2022
Unscored —

CVE-2018-8592

An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD,…

Microsoft Windows Server 2019 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8566

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLo…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8485

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8450 EPSS 16%

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote …

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8471

An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handl…

Microsoft Windows Server 2019 Windows Server 2016 Windows 8.1 Windows

Nov 14, 2018
Unscored —

CVE-2018-8547

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Fede…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8408

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "W…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Nov 14, 2018
Unscored —

CVE-2018-8407

An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializ…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8584 Public exploit

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8554

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevatio…

Microsoft Windows Server 2019 Windows 10 Windows 10 Servers Windows

Nov 14, 2018
Unscored —

CVE-2018-8544 Public exploit EPSS 48%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8562

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8417

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard…

Microsoft Windows Server 2019 Windows Server 2016 Windows 10 Windows

Nov 14, 2018
Unscored —

CVE-2018-8454

An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, a…

Microsoft Windows Server 2019 Windows 10 Windows 10 Servers Windows

Nov 14, 2018
Unscored —

CVE-2018-8415

A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft Po…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Nov 14, 2018
Unscored —

CVE-2018-8563

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Informat…

Microsoft Windows Server 2012 R2 Windows Server 2012 Windows 8.1 Windows

Nov 14, 2018
High 7.8

CVE-2018-1780

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local db2 ins…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 7.4

CVE-2018-1834

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 contains a vulnerability th…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
Medium 4.8

CVE-2018-1857

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow a user to bypass FGAC control and ga…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 8.4

CVE-2018-1802

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared librar…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
Medium 6.2

CVE-2018-1799

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local unprivi…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018
High 8.4

CVE-2018-1781

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Nov 9, 2018