Skip to content
OpenAdvisories

Vendor

Microsoft

14,258 known vulnerabilities.

Products

Windows Server 2019 6,362 Windows Server 2019 (Server Core installation) 6,265 Windows 10 Version 1809 5,907 Windows Server 2022 5,762 Windows Server 2016 5,572 Windows Server 2016 (Server Core installation) 5,368 Windows 10 Version 21H2 5,141 Windows 10 Version 1607 4,987 Windows 10 Version 22H2 4,643 Windows Server 2025 4,336 Windows Server 2025 (Server Core installation) 4,334 Windows 11 Version 24H2 4,232 Windows Server 2012 R2 4,119 Windows 11 version 23H2 4,056 Windows Server 2012 R2 (Server Core installation) 3,974 Windows Server 2012 3,881 Windows Server 2012 (Server Core installation) 3,748 Windows 11 Version 25H2 3,497 Windows 11 version 26H1 3,230 Windows 10 Version 1507 2,323 Windows Server 2008 R2 Service Pack 1 1,900 Windows Server 2008 R2 Service Pack 1 (Server Core installation) 1,886 Windows 11 version 22H2 1,776 Windows Server 2022, 23H2 Edition (Server Core installation) 1,723 Windows Server 2008 Service Pack 2 1,694 Windows Server 2008 Service Pack 2 (Server Core installation) 1,689 Windows 11 Version 26H2 1,663 Windows 11 version 21H2 1,560 Windows 11 version 22H3 1,276 Windows 10 Version 20H2 1,259 Windows 8.1 1,117 Microsoft 365 Apps for Enterprise 1,105 Windows 10 Version 1903 for x64-based Systems 1,069 Windows Server, version 1903 (Server Core installation) 1,055 Windows 10 Version 1909 1,045 Windows 10 Version 1903 for ARM64-based Systems 1,037 Windows 10 Version 1903 for 32-bit Systems 1,034 Windows Server, version 1909 (Server Core installation) 989 Windows Server version 20H2 965 Microsoft Office LTSC 2021 953
All Critical High Medium Low Exploited only Public exploit

8,209 results · Clear filters · Feed

  • High 7.5
    CVE-2018-8384 Public exploit EPSS 64%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.8
    CVE-2018-8406 Exploited · Ransomware

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

    Microsoft Windows Server 2016 Windows 10 Windows 10 Servers Windows
    KEV Mar 28, 2022
  • High 7.5
    CVE-2018-8390 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, …

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.8
    CVE-2018-8405 Exploited · Ransomware

    An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obj…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows 8.1 Windows
    KEV Mar 28, 2022
  • High 7.5
    CVE-2018-8371 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer…

    Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9 NuGet
  • High 7.5
    CVE-2018-8372 EPSS 26%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8381 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8266 EPSS 29%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8359 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, C…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2018-8355 Public exploit EPSS 68%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8373 Exploited EPSS 62%

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

    Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 9
    KEV Mar 25, 2022
  • High 8.8
    CVE-2018-8414 Exploited Public exploit EPSS 73%

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

    Microsoft Windows 10 Windows 10 Servers Windows
    KEV Mar 25, 2022
  • High 7.5
    CVE-2018-8380 EPSS 15%

    ChakraCore remote code execution vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8385 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8288 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8280 EPSS 21%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8287 EPSS 16%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explo…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8283 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, C…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2018-8171 EPSS 11%

    Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated

    A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…

    Microsoft ASP.NET Core ASP.NET ASP.NET MVC 5.2 NuGet
  • High 7.5
    CVE-2018-8294 EPSS 21%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8291 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8290 EPSS 21%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8298 Exploited Public exploit EPSS 75%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, C…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
    KEV Mar 3, 2022
  • High 7.5
    CVE-2018-8286 EPSS 21%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8243 EPSS 12%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8267.

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2018-8229 Public exploit EPSS 71%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8227 EPSS 17%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0946 Public exploit EPSS 51%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0954 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-0943 EPSS 16%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0945 EPSS 16%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-1022 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8139 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

    A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

    Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
    KEV Feb 15, 2022
  • High 7.5
    CVE-2018-8137 EPSS 16%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8145 Public exploit EPSS 67%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.0
    CVE-2018-8120 Exploited · Ransomware Public exploit EPSS 73%

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

    Microsoft Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2018-8133 Public exploit EPSS 50%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8177 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-0…

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • High 7.5
    CVE-2018-0990 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet