WR
Product
Windows RT 8.1
On CISA KEVExploited in the wildRansomware-linked
2,020
CVEs
87
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 29High 463Medium 8Low 0
Watch
Add Windows RT 8.1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0853 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0845 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0842 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0795 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0794 | 8.8 | Apr 9 | A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0793 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0792 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0791 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0790 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0772 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0765 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0756 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0662 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0633 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0630 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0618 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0552 | 8.8 | Jan 8 | An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1,… Affected: All versions, or not specified |
| CVE-2018-8544 | 8.8 | Nov 14 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: All versions, or not specified |
| CVE-2018-8450 | 8.8 | Nov 14 | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7,… Affected: All versions, or not specified |
| CVE-2018-8256 | 8.8 | Nov 14 | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This… Affected: All versions, or not specified |
| CVE-2018-8494 | 8.8 | Oct 10 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects… Affected: All versions, or not specified |
| CVE-2018-8475 | 8.8 | Sep 13 | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects… Affected: All versions, or not specified |
| CVE-2018-8349 | 8.8 | Aug 15 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code… Affected: Windows RT 8.1 |
| CVE-2018-8344 | 8.8 | Aug 15 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: Windows RT 8.1 |
| CVE-2018-1016 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1015 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1013 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1012 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1010 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1004 | 8.8 | Apr 12 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: All versions, or not specified |
| CVE-2017-11763 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-11762 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2017-8682 | 8.8 | Sep 13 | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… Affected: All versions, or not specified |
| CVE-2017-8590 | 8.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2017-8528 | 8.8 | Jun 15 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: All versions, or not specified |
| CVE-2017-8527 | 8.8 | Jun 15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: All versions, or not specified |
| CVE-2017-0084 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2016-7274 | 8.8 | Dec 20 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2016-7272 | 8.8 | Dec 20 | The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: All versions, or not specified |
| CVE-2016-7217 | 8.8 | Nov 10 | Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2016-7205 | 8.8 | Nov 10 | Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and… Affected: All versions, or not specified |
| CVE-2016-3368 | 8.8 | Sep 14 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607… Affected: All versions, or not specified |
| CVE-2016-3352 | 8.8 | Sep 14 | Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to… Affected: All versions, or not specified |
| CVE-2016-3345 | 8.8 | Sep 14 | The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-3213 | 8.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified |
| CVE-2016-0195 | 8.8 | May 11 | The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows… Affected: All versions, or not specified |
| CVE-2016-0184 | 8.8 | May 11 | Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2016-0178 | 8.8 | May 11 | The RPC NDR Engine in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-0170 | 8.8 | May 11 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0145 | 8.8 | Apr 12 | The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)