Vendor

Microsoft

14,257 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

882 results · Clear filters · Feed

High 7.5

CVE-2018-8133 Public exploit EPSS 50%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
Unscored —

CVE-2018-8115 Public exploit EPSS 34%

A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to prop…

Microsoft Windows Host Compute Windows

May 2, 2018
Unscored —

CVE-2018-0970 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0969 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0974 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0975 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0966 Public exploit

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …

Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows

Apr 12, 2018
Unscored —

CVE-2018-0971 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
High 7.5

CVE-2018-0980 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 12, 2018
Unscored —

CVE-2018-0972 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0973 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Apr 12, 2018
Unscored —

CVE-2018-0968 Public exploit

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows

Apr 12, 2018
Unscored —

CVE-2018-1026 Public exploit EPSS 41%

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…

Microsoft Microsoft Office

Apr 12, 2018
Unscored —

CVE-2018-0986 Public exploit EPSS 63%

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a spec…

Microsoft Microsoft Exchange Server Microsoft Security Essentials Microsoft Forefront Endpoint Protection Windows

Apr 4, 2018
Unscored —

CVE-2018-1038 Public exploit

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due t…

Microsoft Windows Windows

Apr 2, 2018
Unscored —

CVE-2018-0891 Public exploit EPSS 14%

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows R…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Mar 14, 2018
Low 3.1

CVE-2018-0878 Public exploit EPSS 21%

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windo…

Microsoft Windows Remote Assistance Windows

Mar 14, 2018
Unscored —

CVE-2018-0935 Public exploit EPSS 56%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Internet Explorer

Mar 14, 2018
Unscored —

CVE-2018-0894 Public exploit

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0886 Public exploit EPSS 82%

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 …

Microsoft Windows Windows

Mar 14, 2018
High 7.5

CVE-2018-0934 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0897 Public exploit

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0880 Public exploit

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

Microsoft Windows Desktop Bridge Windows

Mar 14, 2018
Unscored —

CVE-2018-0877 Public exploit

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server…

Microsoft Windows Desktop Bridge Virtual File System Windows

Mar 14, 2018
Unscored —

CVE-2018-0895 Public exploit

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
High 7.5

CVE-2018-0933 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0901 Public exploit

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serv…

Microsoft Windows kernel Windows

Mar 14, 2018
Unscored —

CVE-2018-0882 Public exploit

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an e…

Microsoft Windows Deskop Bridge Windows

Mar 14, 2018
Unscored —

CVE-2018-0840 Public exploit EPSS 53%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve…

Microsoft Microsoft Edge, ChakraCore, Internet Explorer Browsers

Feb 15, 2018
High 7.5

CVE-2018-0834 Public exploit EPSS 55%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
Unscored —

CVE-2018-0866 Public exploit EPSS 44%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

Microsoft Internet Explorer

Feb 15, 2018
Unscored —

CVE-2018-0833 Public exploit EPSS 40%

The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R…

Microsoft Server Message Block

Feb 15, 2018
High 7.5

CVE-2018-0860 Public exploit EPSS 68%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0838 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0837 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
Unscored —

CVE-2018-0821 Public exploit

AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows…

Microsoft AppContainer

Feb 15, 2018
Unscored —

CVE-2018-0822 Public exploit

NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elev…

Microsoft NTFS

Feb 15, 2018
High 7.5

CVE-2018-0835 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
Unscored —

CVE-2018-0826 Public exploit

Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, vers…

Microsoft Windows Storage Services Windows

Feb 15, 2018
Unscored —

CVE-2018-0832 Public exploit

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windo…

Microsoft Windows Windows

Feb 15, 2018