| CVE-2008-4250 Known exploited | Critical 9.8 | The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a craf… Assigned by microsoft | Oct 23, 2008 |
| CVE-2009-1123 Known exploited | High 7.8 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows… Assigned by microsoft | Jun 10, 2009 |
| CVE-2010-2568 Known exploited | High 7.8 | Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)… Assigned by microsoft | Jul 22, 2010 |
| CVE-2010-4398 Known exploited | High 7.8 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2… Assigned by mitre | Dec 3, 2010 |
| CVE-2011-3402 Known exploited | High 8.8 | Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server… Assigned by microsoft | Nov 4, 2011 |
| CVE-2012-0151 Known exploited | High 7.8 | The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and… Assigned by microsoft | Apr 10, 2012 |
| CVE-2013-3660 Known exploited | High 7.8 | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind… Assigned by mitre | May 24, 2013 |
| CVE-2013-3906 Known exploited | High 7.8 | GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remo… Assigned by microsoft | Nov 6, 2013 |
| CVE-2013-3918 Known exploited | High 8.8 | The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… Assigned by microsoft | Nov 12, 2013 |
| CVE-2013-3900 Known exploited | Medium 5.5 | WinVerifyTrust Signature Validation Vulnerability Assigned by microsoft | Dec 11, 2013 |
| CVE-2014-1812 Known exploited | High 8.8 | The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle… Assigned by microsoft | May 14, 2014 |
| CVE-2014-4148 Known exploited | High 8.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-4114 Known exploited | High 7.8 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-4113 Known exploited | High 7.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-6352 Known exploited | High 7.8 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… Assigned by microsoft | Oct 22, 2014 |
| CVE-2014-6332 Known exploited | High 8.8 | OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT… Assigned by microsoft | Nov 11, 2014 |
| CVE-2014-4077 Known exploited | High 7.8 | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attack… Assigned by microsoft | Nov 11, 2014 |
| CVE-2014-6324 Known exploited | High 8.8 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012… Assigned by microsoft | Nov 18, 2014 |
| CVE-2015-0016 Known exploited | High 7.8 | Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go… Assigned by microsoft | Jan 13, 2015 |
| CVE-2015-1635 Known exploited | Critical 9.8 | HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP request… Assigned by microsoft | Apr 14, 2015 |
| CVE-2015-1701 Known exploited | High 7.8 | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in… Assigned by microsoft | Apr 21, 2015 |
| CVE-2015-2360 Known exploited | High 8.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201… Assigned by microsoft | Jun 10, 2015 |
| CVE-2015-2387 Known exploited | High 7.8 | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2426 Known exploited | High 8.8 | Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 20, 2015 |
| CVE-2015-2423 | Medium 4.3 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoin… Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-1769 Known exploited | Medium 6.6 | Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 misha… Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-2546 Known exploited | High 8.2 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows… Assigned by microsoft | Sep 9, 2015 |
| CVE-2016-0040 Known exploited | High 7.8 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege V… Assigned by microsoft | Feb 10, 2016 |
| CVE-2016-0099 Known exploited | High 7.8 | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 15… Assigned by microsoft | Mar 9, 2016 |
| CVE-2016-0167 Known exploited | High 7.8 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… Assigned by microsoft | Apr 12, 2016 |
| CVE-2016-0165 Known exploited | High 7.8 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… Assigned by microsoft | Apr 12, 2016 |
| CVE-2016-3309 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… Assigned by microsoft | Aug 9, 2016 |
| CVE-2016-3393 Known exploited | High 7.8 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window… Assigned by microsoft | Oct 14, 2016 |
| CVE-2016-3298 Known exploited | Medium 6.5 | Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence o… Assigned by microsoft | Oct 14, 2016 |
| CVE-2016-7256 Known exploited | High 8.8 | atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Assigned by microsoft | Nov 10, 2016 |
| CVE-2016-7255 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 160… Assigned by microsoft | Nov 10, 2016 |
| CVE-2017-0147 Known exploited Healthcare | High 7.5 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0101 Known exploited | High 7.8 | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0022 Known exploited | Medium 6.5 | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0005 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0001 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0199 Known exploited Healthcare | High 7.8 | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote a… Assigned by microsoft | Apr 12, 2017 |
| CVE-2017-0263 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Se… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0213 Known exploited | High 7.3 | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, an… Assigned by microsoft | May 12, 2017 |
| CVE-2017-8543 Known exploited | Critical 9.8 | Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012… Assigned by microsoft | Jun 15, 2017 |
| CVE-2017-8464 Known exploited | High 8.8 | Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows S… Assigned by microsoft | Jun 15, 2017 |
| CVE-2018-8174 Known exploited | High 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7,… Assigned by microsoft | May 9, 2018 |
| CVE-2018-8120 Known exploited | High 7.0 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | May 9, 2018 |
| CVE-2018-0824 Known exploited | High 7.5 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." T… Assigned by microsoft | May 9, 2018 |
| CVE-2018-8440 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Win… Assigned by microsoft | Sep 13, 2018 |
