Windows 8 vulnerabilities | LiveThreat CVE Feed

Product

Windows 8

by Microsoft · last CVE Feb 28, 2018

On CISA KEVExploited in the wildRansomware-linked

254

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities254 In the news1 Timeline

Severity mix

Critical 1High 31Medium 3Low 0

Severity

All severities254 Critical1 High31 Medium3 Low0

Exploitation

On CISA KEV16 Exploited in the wild16

Watch

Add Windows 8 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-2426 In wildKEV	8.8	87%	Jul 20	Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2015-2360 In wildKEV	8.8	15%	Jun 10	Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2014-6324 In wildKEV	8.8	87%	Nov 18	Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2014-6332 In wildKEV	8.8	95%	Nov 11	Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2014-4148 In wildKEV	8.8	60%	Oct 15	Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2014-1812 RansomwareIn wildKEV	8.8	65%	May 14	Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2013-3918 In wildKEV	8.8	74%	Nov 12	Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified
CVE-2015-2546 RansomwareIn wildKEV	8.2	10%	Sep 9	Microsoft Win32k Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2015-2387 In wildKEV	7.8	35%	Jul 14	Microsoft ATM Font Driver Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2015-0016 In wildKEV	7.8	76%	Jan 13	Microsoft Windows TS WebProxy Directory Traversal Vulnerability Affected: All versions, or not specified
CVE-2014-6352 In wildKEV	7.8	77%	Oct 22	Microsoft Windows Code Injection Vulnerability Affected: All versions, or not specified
CVE-2014-4114 In wildKEV	7.8	82%	Oct 15	Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2014-4113 In wildKEV	7.8	87%	Oct 15	Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2013-3660 In wildKEV	7.8	39%	May 24	Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified
CVE-2013-0006	8.8	28%	Jan 9	Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: All versions, or not specified
CVE-2013-1340	8.4	2%	Jul 10	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified
CVE-2013-3894	8.1	43%	Oct 9	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Affected: All versions, or not specified
CVE-2018-6947	7.8	3%	Feb 28	An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged… Affected: All versions, or not specified
CVE-2017-0050	7.8	1%	Mar 17	The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold… Affected: All versions, or not specified
CVE-2016-0016	7.8	30%	Jan 13	Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10… Affected: All versions, or not specified
CVE-2016-0015	7.8	49%	Jan 13	DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511… Affected: All versions, or not specified
CVE-2016-0014	7.8	2%	Jan 13	Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10… Affected: All versions, or not specified
CVE-2016-0007	7.8	5%	Jan 13	The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified
CVE-2013-1342	7.8	1%	Sep 11	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… Affected: All versions, or not specified
CVE-2013-3129	7.8	32%	Jul 10	Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows… Affected: All versions, or not specified
CVE-2012-2897	7.8	22%	Sep 26	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows… Affected: All versions, or not specified
CVE-2013-1292	7.4	1%	Apr 9	Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server… Affected: All versions, or not specified
CVE-2016-0018	7.3	13%	Jan 13	Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a… Affected: All versions, or not specified
CVE-2016-0006	7.3	4%	Jan 13	The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified
CVE-2018-7249	7.0	1%	Feb 26	An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc Affected: All versions, or not specified
CVE-2013-1294	7.0	1%	Apr 9	Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1,… Affected: All versions, or not specified