| CVE-2018-8611 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, W… Assigned by microsoft | Dec 12, 2018 |
| CVE-2018-8589 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Window… Assigned by microsoft | Nov 14, 2018 |
| CVE-2018-8453 Known exploited | High 7.8 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | Oct 10, 2018 |
| CVE-2018-8440 Known exploited | High 7.8 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Win… Assigned by microsoft | Sep 13, 2018 |
| CVE-2018-8174 Known exploited | High 7.5 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7,… Assigned by microsoft | May 9, 2018 |
| CVE-2018-8120 Known exploited | High 7.0 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows… Assigned by microsoft | May 9, 2018 |
| CVE-2018-0824 Known exploited | High 7.5 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." T… Assigned by microsoft | May 9, 2018 |
| CVE-2017-8543 Known exploited | Critical 9.8 | Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012… Assigned by microsoft | Jun 15, 2017 |
| CVE-2017-8464 Known exploited | High 8.8 | Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows S… Assigned by microsoft | Jun 15, 2017 |
| CVE-2017-0263 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Se… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0213 Known exploited | High 7.3 | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, an… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0199 Known exploited Healthcare | High 7.8 | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote a… Assigned by microsoft | Apr 12, 2017 |
| CVE-2017-0147 Known exploited Healthcare | High 7.5 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0101 Known exploited | High 7.8 | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0005 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0001 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2016-7256 Known exploited | High 8.8 | atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Assigned by microsoft | Nov 10, 2016 |
| CVE-2016-7255 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 160… Assigned by microsoft | Nov 10, 2016 |
| CVE-2016-3393 Known exploited | High 7.8 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Window… Assigned by microsoft | Oct 14, 2016 |
| CVE-2016-3298 Known exploited | Medium 6.5 | Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence o… Assigned by microsoft | Oct 14, 2016 |
| CVE-2016-3309 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… Assigned by microsoft | Aug 9, 2016 |
| CVE-2016-0185 Known exploited | High 7.8 | Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Cente… Assigned by microsoft | May 11, 2016 |
| CVE-2016-0167 Known exploited | High 7.8 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… Assigned by microsoft | Apr 12, 2016 |
| CVE-2016-0165 Known exploited | High 7.8 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… Assigned by microsoft | Apr 12, 2016 |
| CVE-2016-0099 Known exploited | High 7.8 | The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 15… Assigned by microsoft | Mar 9, 2016 |
| CVE-2016-0040 Known exploited | High 7.8 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege V… Assigned by microsoft | Feb 10, 2016 |
| CVE-2015-2546 Known exploited | High 8.2 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows… Assigned by microsoft | Sep 9, 2015 |
| CVE-2015-2423 | Medium 4.3 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoin… Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-1769 Known exploited | Medium 6.6 | Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 misha… Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-2426 Known exploited | High 8.8 | Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 20, 2015 |
| CVE-2015-2387 Known exploited | High 7.8 | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2360 Known exploited | High 8.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201… Assigned by microsoft | Jun 10, 2015 |
| CVE-2015-1701 Known exploited | High 7.8 | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in… Assigned by microsoft | Apr 21, 2015 |
| CVE-2015-1635 Known exploited | Critical 9.8 | HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP request… Assigned by microsoft | Apr 14, 2015 |
| CVE-2015-0016 Known exploited | High 7.8 | Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go… Assigned by microsoft | Jan 13, 2015 |
| CVE-2014-6324 Known exploited | High 8.8 | The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012… Assigned by microsoft | Nov 18, 2014 |
| CVE-2014-6332 Known exploited | High 8.8 | OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT… Assigned by microsoft | Nov 11, 2014 |
| CVE-2014-4077 Known exploited | High 7.8 | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attack… Assigned by microsoft | Nov 11, 2014 |
| CVE-2014-6352 Known exploited | High 7.8 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… Assigned by microsoft | Oct 22, 2014 |
| CVE-2014-4148 Known exploited | High 8.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-4114 Known exploited | High 7.8 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-4113 Known exploited | High 7.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and… Assigned by microsoft | Oct 15, 2014 |
| CVE-2014-1812 Known exploited | High 8.8 | The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle… Assigned by microsoft | May 14, 2014 |
| CVE-2013-3900 Known exploited | Medium 5.5 | WinVerifyTrust Signature Validation Vulnerability Assigned by microsoft | Dec 11, 2013 |
| CVE-2013-3918 Known exploited | High 8.8 | The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… Assigned by microsoft | Nov 12, 2013 |
| CVE-2013-3660 Known exploited | High 7.8 | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wind… Assigned by mitre | May 24, 2013 |
| CVE-2012-0151 Known exploited | High 7.8 | The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and… Assigned by microsoft | Apr 10, 2012 |
| CVE-2011-3402 Known exploited | High 8.8 | Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server… Assigned by microsoft | Nov 4, 2011 |
| CVE-2010-4398 Known exploited | High 7.8 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2… Assigned by mitre | Dec 3, 2010 |
| CVE-2010-2568 Known exploited | High 7.8 | Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1)… Assigned by microsoft | Jul 22, 2010 |
