Windows 10 Servers vulnerabilities | LiveThreat CVE Feed

Product

Windows 10 Servers

by Microsoft · last CVE Dec 12, 2018

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities27 In the news0 Timeline

Severity mix

Critical 0High 20Medium 7Low 0

Severity

All severities27 Critical0 High20 Medium7 Low0

Exploitation

On CISA KEV8 Exploited in the wild8

Watch

Add Windows 10 Servers to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-8340	6.5	8%	Aug 15	A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "AD FS Security… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8394	6.5	9%	Aug 15	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8398	6.5	9%	Aug 15	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8200	5.3	2%	Aug 15	A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8204	5.3	2%	Aug 15	A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8348	4.7	2%	Aug 15	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)
CVE-2018-8341	4.7	3%	Aug 15	An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This… Affected: version 1709 (Server Core Installation); version 1803 (Server Core Installation)