W8
Product
Windows 8
On CISA KEVExploited in the wildRansomware-linked
254
CVEs
16
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 31Medium 3Low 0
Watch
Add Windows 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1635 In wildKEV | 9.8 | Apr 14 | Microsoft HTTP.sys Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2426 In wildKEV | 8.8 | Jul 20 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2360 In wildKEV | 8.8 | Jun 10 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6324 In wildKEV | 8.8 | Nov 18 | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6332 In wildKEV | 8.8 | Nov 11 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4148 In wildKEV | 8.8 | Oct 15 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-1812 RansomwareIn wildKEV | 8.8 | May 14 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3918 In wildKEV | 8.8 | Nov 12 | Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2015-2546 RansomwareIn wildKEV | 8.2 | Sep 9 | Microsoft Win32k Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2015-2387 In wildKEV | 7.8 | Jul 14 | Microsoft ATM Font Driver Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-0016 In wildKEV | 7.8 | Jan 13 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2014-6352 In wildKEV | 7.8 | Oct 22 | Microsoft Windows Code Injection Vulnerability Affected: All versions, or not specified |
| CVE-2014-4114 In wildKEV | 7.8 | Oct 15 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4113 In wildKEV | 7.8 | Oct 15 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3660 In wildKEV | 7.8 | May 24 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-1769 In wildKEV | 6.6 | Aug 15 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-0006 | 8.8 | Jan 9 | Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: All versions, or not specified |
| CVE-2013-1340 | 8.4 | Jul 10 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified |
| CVE-2013-3894 | 8.1 | Oct 9 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Affected: All versions, or not specified |
| CVE-2018-6947 | 7.8 | Feb 28 | An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged… Affected: All versions, or not specified |
| CVE-2017-0050 | 7.8 | Mar 17 | The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold… Affected: All versions, or not specified |
| CVE-2016-0016 | 7.8 | Jan 13 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-0015 | 7.8 | Jan 13 | DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0014 | 7.8 | Jan 13 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-0007 | 7.8 | Jan 13 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2013-1342 | 7.8 | Sep 11 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified |
| CVE-2013-3129 | 7.8 | Jul 10 | Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows… Affected: All versions, or not specified |
| CVE-2012-2897 | 7.8 | Sep 26 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows… Affected: All versions, or not specified |
| CVE-2013-1292 | 7.4 | Apr 9 | Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server… Affected: All versions, or not specified |
| CVE-2016-0018 | 7.3 | Jan 13 | Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a… Affected: All versions, or not specified |
| CVE-2016-0006 | 7.3 | Jan 13 | The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2018-7249 | 7.0 | Feb 26 | An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc Affected: All versions, or not specified |
| CVE-2013-1294 | 7.0 | Apr 9 | Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1,… Affected: All versions, or not specified |
| CVE-2018-7250 | 5.5 | Feb 26 | An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc Affected: All versions, or not specified |
| CVE-2016-0008 | 4.3 | Jan 13 | The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and… Affected: All versions, or not specified |
| CVE-2015-6174 | – | Dec 9 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and… Affected: All versions, or not specified |
| CVE-2015-6173 | – | Dec 9 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and… Affected: All versions, or not specified |
| CVE-2015-6171 | – | Dec 9 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and… Affected: All versions, or not specified |
| CVE-2015-6133 | – | Dec 9 | Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library loading, which allows local users to… Affected: All versions, or not specified |
| CVE-2015-6132 | – | Dec 9 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2015-6131 | – | Dec 9 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted .mcl file, aka… Affected: All versions, or not specified |
| CVE-2015-6127 | – | Dec 9 | Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary files via a crafted .mcl file, aka… Affected: All versions, or not specified |
| CVE-2015-6126 | – | Dec 9 | Race condition in the Pragmatic General Multicast (PGM) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,… Affected: All versions, or not specified |
| CVE-2015-6108 | – | Dec 9 | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: All versions, or not specified |
| CVE-2015-6107 | – | Dec 9 | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2015-6113 | – | Nov 11 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and… Affected: All versions, or not specified |
| CVE-2015-6112 | – | Nov 11 | SChannel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1… Affected: All versions, or not specified |
| CVE-2015-6111 | – | Nov 11 | IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles encryption negotiation, which allows… Affected: All versions, or not specified |
| CVE-2015-6104 | – | Nov 11 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Affected: All versions, or not specified |
| CVE-2015-6103 | – | Nov 11 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Affected: All versions, or not specified |