Vendor

Microsoft

14,258 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953

All Critical High Medium Low Exploited only Public exploit

8,209 results · Clear filters · Feed

High 8.8

CVE-2019-0541 Exploited Public exploit EPSS 53%

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 9

Jan 8, 2019
KEV Nov 3, 2021
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0564

Denial of service in ASP.NET Core

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0548.

Microsoft ASP.NET Core Microsoft.NETCore.App Microsoft.AspNetCore.All NuGet

Jan 8, 2019
High 7.5

CVE-2019-0545

Exposure of Sensitive Information in System.Net.Http

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Mi…

Microsoft .NET Core Microsoft .NET Framework Microsoft.NETCore.App NuGet

Jan 8, 2019
High 7.5

CVE-2018-8653 Exploited EPSS 30%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9

Dec 20, 2018
KEV Nov 3, 2021
High 7.5

CVE-2018-8618 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8583 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 8.4

CVE-2018-8639 Exploited · Ransomware Public exploit EPSS 22%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV Mar 3, 2025
High 7.5

CVE-2018-8624 EPSS 13%

ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.8

CVE-2018-8611 Exploited Public exploit

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Dec 12, 2018
KEV May 24, 2022
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8629 EPSS 23%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.4

CVE-2018-8581 Exploited · Ransomware Public exploit EPSS 28%

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…

Microsoft Microsoft Exchange Server

Nov 14, 2018
KEV Mar 3, 2022
High 7.8

CVE-2018-8589 Exploited

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k…

Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows

Nov 14, 2018
KEV May 23, 2022
High 7.5

CVE-2018-8542 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8557 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8543 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8541 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8555 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8551 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8556 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.5

CVE-2018-8588 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Nov 14, 2018
High 7.8

CVE-2018-8453 Exploited · Ransomware Public exploit EPSS 70%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Server 2019 Windows Server 2016 Windows Server 2012 R2 Windows

Oct 10, 2018
KEV Jan 21, 2022
High 7.5

CVE-2018-8513 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8292 EPSS 15%

.NET Core Information Disclosure

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core…

Microsoft .NET Core PowerShell Core System.Net.Http NuGet

Oct 10, 2018
High 7.5

CVE-2018-8510 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8511 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8503 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8505 EPSS 14%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Oct 10, 2018
High 7.5

CVE-2018-8391 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8354, CVE-2018-8456, C…

Microsoft ChakraCore Microsoft.ChakraCore NuGet

Sep 13, 2018
High 7.5

CVE-2018-8367 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8465 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.8

CVE-2018-8440 Exploited · Ransomware Public exploit EPSS 19%

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…

Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows

Sep 13, 2018
KEV Mar 28, 2022
High 7.5

CVE-2018-8459 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, …

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8354 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8467 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8466 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8456 EPSS 15%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8354, …

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Sep 13, 2018
High 7.5

CVE-2018-8269 Public exploit EPSS 27%

Denial of service in ASP.NET Core

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Microsoft Microsoft.Data.OData Microsoft.AspNetCore.All Microsoft.Data.OData NuGet

Sep 13, 2018
High 7.5

CVE-2018-8409

Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests

A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." This affects .NET Core 2.1, System.IO.Pipelines, ASP.NET Core 2.1.

Microsoft ASP.NET Core .NET Core System.IO.Pipelines NuGet

Sep 13, 2018