WI
Operating System
Windows
On CISA KEVExploited in the wildRansomware-linked
3,283
CVEs
190
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 62High 419Medium 19Low 0
Watch
Add Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1121 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1120 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1119 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1118 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1117 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability' Affected: 1709; 1803; 1809; 1903 |
| CVE-2019-1102 | 8.8 | Jul 15 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0888 | 8.8 | Jun 12 | A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0722 | 8.8 | Jun 12 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0902 | 8.8 | May 16 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809; 1903 |
| CVE-2019-0853 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0845 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0842 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0795 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0794 | 8.8 | Apr 9 | A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0793 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0792 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0791 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0790 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0772 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0765 | 8.8 | Apr 9 | A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0756 | 8.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability' Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2019-0662 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +12 more |
| CVE-2019-0633 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution… Affected: 2012; 2012 (Core installation); 2012 R2; 2012 R2 (Core installation); 2016; 2016 (Core installation); +4 more |
| CVE-2019-0630 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests, aka 'Windows SMB Remote Code Execution… Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +12 more |
| CVE-2019-0618 | 8.8 | Mar 5 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution… Affected: 2008 R2 for x64-based Systems Service Pack 1 (Core installation); 2008 R2 for Itanium-Based Systems Service Pack 1; 2008 R2 for x64-based Systems Service Pack 1; 2008 for 32-bit Systems Service Pack 2 (Core installation); 2012; 2012 (Core installation); +12 more |
| CVE-2019-0552 | 8.8 | Jan 8 | An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1,… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2018-8634 | 8.8 | Dec 12 | A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2018-8544 | 8.8 | Nov 14 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2018-8450 | 8.8 | Nov 14 | A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7,… Affected: 1607; 1703; 1709 |
| CVE-2018-8256 | 8.8 | Nov 14 | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2018-8494 | 8.8 | Oct 10 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects… Affected: 1607; 1703; 1709; 1803; 1809 |
| CVE-2018-8475 | 8.8 | Sep 13 | A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects… Affected: 1607; 1703; 1709; 1803 |
| CVE-2018-8420 | 8.8 | Sep 13 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects… Affected: 1607; 1703; 1709; 1803 |
| CVE-2018-8332 | 8.8 | Sep 13 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution… Affected: 2008; 2008; 2008; 2012; 2012; 2016; +2 more |
| CVE-2018-8349 | 8.8 | Aug 15 | A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code… Affected: 32-bit Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; +4 more |
| CVE-2018-8350 | 8.8 | Aug 15 | A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory, aka "Windows PDF Remote Code Execution Vulnerability." This… Affected: Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; Version 1803 for 32-bit Systems; Version 1803 for x64-based Systems |
| CVE-2018-8344 | 8.8 | Aug 15 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 32-bit Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; +4 more |
| CVE-2018-8219 | 8.8 | Jun 14 | An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of… Affected: 1607; 1703; 1709; 1803 |
| CVE-2018-1016 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 1511; 1607; 1703; 1709 |
| CVE-2018-1015 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 1511; 1607; 1703; 1709 |
| CVE-2018-1013 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 1511; 1607; 1703; 1709 |
| CVE-2018-1012 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 1511; 1607; 1703; 1709 |
| CVE-2018-1010 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution… Affected: 1511; 1607; 1703; 1709 |
| CVE-2018-1004 | 8.8 | Apr 12 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This… Affected: 1511; 1607; 1703; 1709 |
| CVE-2017-11763 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: 1511; 1607; 1703 |
| CVE-2017-11762 | 8.8 | Oct 13 | The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: 1511; 1607; 1703 |
| CVE-2017-8682 | 8.8 | Sep 13 | Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… Affected: 1511; 1607; 1703 |
| CVE-2017-8664 | 8.8 | Aug 8 | Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution… Affected: 1511; 1607; 1703 |
| CVE-2017-8590 | 8.8 | Jul 11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016… Affected: All versions, or not specified |
| CVE-2017-8527 | 8.8 | Jun 15 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: 1511; 1607; 1703 |
The 500 most important CVEs for this product (exploited first, then by severity)