Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

882 results · Clear filters · Feed

Unscored —

CVE-2018-8495 Public exploit EPSS 51%

A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Oct 10, 2018
High 7.8

CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
KEV Jan 21, 2022
Unscored —

CVE-2018-8413 Public exploit EPSS 46%

A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8527 Public exploit EPSS 23%

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…

Microsoft SQL Server Management Studio 17.9 SQL Server Management Studio 18.0

Oct 10, 2018
Unscored —

CVE-2018-8533 Public exploit EPSS 23%

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious …

Microsoft SQL Server Management Studio 17.9 SQL Server Management Studio 18.0

Oct 10, 2018
Unscored —

CVE-2018-8411 Public exploit

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
Unscored —

CVE-2018-8420 Public exploit EPSS 49%

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
High 7.8

CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
KEV Mar 28, 2022
Unscored —

CVE-2018-8474 Public exploit EPSS 38%

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted mess…

Microsoft Microsoft Lync

Sep 13, 2018
Unscored —

CVE-2018-8449 Public exploit

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Sep 13, 2018
Unscored —

CVE-2018-8463 Public exploit EPSS 15%

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…

Microsoft Microsoft Edge Browsers

Sep 13, 2018
High 7.5

CVE-2018-8467 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
Unscored —

CVE-2018-8469 Public exploit EPSS 15%

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…

Microsoft Microsoft Edge Browsers

Sep 13, 2018
High 7.5

CVE-2018-8466 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
Unscored —

CVE-2018-8468 Public exploit EPSS 12%

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
High 7.5

CVE-2018-8269 Public exploit EPSS 27%

Denial of service in ASP.NET Core

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Microsoft Microsoft.Data.OData Microsoft.AspNetCore.All Microsoft.AspNetCore.DataProtection.AzureStorage NuGet

Sep 13, 2018
Unscored —

CVE-2018-8410 Public exploit

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
Unscored —

CVE-2018-0952 Public exploit

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrar…

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Aug 15, 2018
High 7.5

CVE-2018-8384 Public exploit EPSS 64%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Aug 15, 2018
Unscored —

CVE-2018-8389 Public exploit EPSS 30%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9

Aug 15, 2018
High 7.5

CVE-2018-8355 Public exploit EPSS 68%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Aug 15, 2018
High 8.8

CVE-2018-8414 Exploited Public exploit EPSS 73%

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

Microsoft Windows 10 Windows 10 Servers Windows

Aug 15, 2018
KEV Mar 25, 2022
Unscored —

CVE-2018-8284 Public exploit EPSS 46%

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".…

Microsoft Microsoft .NET Framework

Jul 11, 2018
High 7.5

CVE-2018-8288 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Jul 11, 2018
Unscored —

CVE-2018-8172 Public exploit EPSS 34%

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source mark…

Microsoft Microsoft Visual Studio Expression Blend 4

Jul 11, 2018
Unscored —

CVE-2018-8279 Public exploit EPSS 71%

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …

Microsoft Microsoft Edge ChakraCore Browsers

Jul 11, 2018
High 7.5

CVE-2018-8291 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Jul 11, 2018
High 7.5

CVE-2018-8298 Exploited Public exploit EPSS 75%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, C…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Jul 11, 2018
KEV Mar 3, 2022
Unscored —

CVE-2018-0982 Public exploit

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Jun 14, 2018
Unscored —

CVE-2018-8208 Public exploit

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Jun 14, 2018
Unscored —

CVE-2018-8214 Public exploit

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regi…

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Jun 14, 2018
High 7.5

CVE-2018-8229 Public exploit EPSS 71%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jun 14, 2018
High 7.5

CVE-2018-0946 Public exploit EPSS 51%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
Unscored —

CVE-2018-0953 Public exploit EPSS 66%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

May 9, 2018
Unscored —

CVE-2018-0959 Public exploit

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

May 9, 2018
High 7.5

CVE-2018-8139 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
High 7.5

CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

May 9, 2018
KEV Feb 15, 2022
High 7.5

CVE-2018-8145 Public exploit EPSS 67%

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

May 9, 2018
High 7.0

CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows

May 9, 2018
KEV Mar 15, 2022
Unscored —

CVE-2018-8134 Public exploit

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Window…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows

May 9, 2018