W8
Product
Windows 8.1
On CISA KEVExploited in the wildRansomware-linked
2,216
CVEs
96
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 35High 456Medium 9Low 0
Watch
Add Windows 8.1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21535 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44676 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-44670 | 8.1 | Dec 13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41088 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-41039 | 8.1 | Nov 9 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30198 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-41081 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-33634 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-24504 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-22035 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-38000 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-38047 | 8.1 | Oct 11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20625 |
| CVE-2022-37958 | 8.1 | Sep 13 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-35767 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20520 |
| CVE-2022-34714 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20520 |
| CVE-2022-34702 | 8.1 | Aug 9 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: 6.3.0 before 6.3.9600.20520 |
| CVE-2022-22038 | 8.1 | Jul 12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-30141 | 8.1 | Jun 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-23270 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21972 | 8.1 | May 10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-26919 | 8.1 | Apr 15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-26435 | 8.1 | Sep 15 | Windows Scripting Engine Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2021-34492 | 8.1 | Jul 14 | Windows Certificate Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2021-28445 | 8.1 | Apr 13 | Windows Network File System Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-1722 | 8.1 | Feb 25 | Windows Fax Service Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2020-17140 | 8.1 | Dec 10 | Windows SMB Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2020-0665 | 8.1 | Feb 11 | An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT… Affected: All versions, or not specified |
| CVE-2019-1424 | 8.1 | Nov 12 | A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0734 | 8.1 | May 16 | An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using… Affected: All versions, or not specified |
| CVE-2018-8225 | 8.1 | Jun 14 | A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code… Affected: All versions, or not specified |
| CVE-2017-11779 | 8.1 | Oct 13 | The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows… Affected: All versions, or not specified |
| CVE-2017-0161 | 8.1 | Sep 13 | The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-8620 | 8.1 | Aug 8 | Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
| CVE-2017-8565 | 8.1 | Jul 11 | Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and… Affected: All versions, or not specified |
| CVE-2017-8563 | 8.1 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2017-0272 | 8.1 | May 12 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Affected: All versions, or not specified |
| CVE-2017-0166 | 8.1 | Apr 12 | An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated Affected: All versions, or not specified |
| CVE-2016-3238 | 8.1 | Jul 13 | The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and… Affected: All versions, or not specified |
| CVE-2016-3223 | 8.1 | Jun 16 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0036 | 8.1 | Feb 10 | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to… Affected: All versions, or not specified |
| CVE-2022-24533 | 8.0 | Apr 15 | Remote Desktop Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2022-21905 | 8.0 | Jan 11 | Windows Hyper-V Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2022-21901 | 8.0 | Jan 11 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: All versions, or not specified |
| CVE-2022-21893 | 8.0 | Jan 11 | Remote Desktop Protocol Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2021-34446 | 8.0 | Jul 16 | Windows HTML Platforms Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2021-1726 | 8.0 | Feb 25 | Microsoft SharePoint Server Spoofing Vulnerability Affected: All versions, or not specified |
| CVE-2020-1552 | 8.0 | Aug 17 | An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations Affected: All versions, or not specified |
| CVE-2020-0655 | 8.0 | Feb 11 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection,… Affected: All versions, or not specified |
| CVE-2019-0720 | 8.0 | Aug 14 | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)