microsoft

15,064 tracked vulnerabilities.

CVE-2018-8426 MEDIUM
Microsoft SharePoint Server - Cross-Site Scripting via Crafted Web Request
Sep 13, 2018
CVSS 5.4
EPSS 0.02
CVE-2018-8425 MEDIUM
Microsoft Edge - Spoofing via HTML Content Handling
Sep 13, 2018
CVSS 4.3
EPSS 0.03
CVE-2018-8424 MEDIUM
Windows GDI - Information Disclosure via Memory Contents
Sep 13, 2018
CVSS 6.5
EPSS 0.13
CVE-2018-8422 MEDIUM
Windows 7 and Windows Server 2008 R2 - Information Disclosure in GDI Component
Sep 13, 2018
CVSS 6.5
EPSS 0.06
CVE-2018-8421 CRITICAL
Microsoft .NET Framework - Remote Code Execution via Untrusted Input
Sep 13, 2018
CVSS 9.8
EPSS 0.29
CVE-2018-8420 HIGH
Microsoft Windows - Remote Code Execution via MSXML Parser
Sep 13, 2018
CVSS 8.8
EPSS 0.49
CVE-2018-8419 MEDIUM
Windows - Information Disclosure via Uninitialized Memory
Sep 13, 2018
CVSS 5.5
EPSS 0.02
CVE-2018-8410 HIGH
Windows Kernel API - Privilege Escalation
Sep 13, 2018
CVSS 7.8
EPSS 0.04
CVE-2018-8409 HIGH
.NET Core 2.1 and ASP.NET Core 2.1 - Denial of Service in System.IO.Pipelines
Sep 13, 2018
CVSS 7.5
EPSS 0.07
CVE-2018-8393 HIGH
Microsoft JET Database Engine - Buffer Overflow
Sep 13, 2018
CVSS 7.8
EPSS 0.22
CVE-2018-8392 HIGH
Microsoft JET Database Engine - Buffer Overflow
Sep 13, 2018
CVSS 7.8
EPSS 0.23
CVE-2018-8391 HIGH
ChakraCore < 1.11.1 - Remote Code Execution via Memory Corruption
Sep 13, 2018
CVSS 7.5
EPSS 0.11
CVE-2018-8367 HIGH
ChakraCore - Remote Code Execution via Memory Corruption
Sep 13, 2018
CVSS 7.5
EPSS 0.15
CVE-2018-8366 LOW
Microsoft Edge - Information Disclosure via Fetch API Filtered Response Handling
Sep 13, 2018
CVSS 3.1
EPSS 0.05
CVE-2018-8354 HIGH
ChakraCore < 1.10.1 and 1.11.1 - Remote Code Execution via Memory Corruption
Sep 13, 2018
CVSS 7.5
EPSS 0.15
CVE-2018-8337 MEDIUM
Windows Subsystem for Linux - Auth Bypass
Sep 13, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-8336 MEDIUM
Windows 7 and Windows Server 2008 - Kernel Information Disclosure via Improper Memory Handling
Sep 13, 2018
CVSS 5.5
EPSS 0.03
CVE-2018-8335 HIGH
Windows 10, Windows 8.1, Windows Server - Denial of Service via SMB
Sep 13, 2018
CVSS 7.5
EPSS 0.09
CVE-2018-8332 HIGH
Microsoft Office and Windows - Remote Code Execution via Embedded Font Handling
Sep 13, 2018
CVSS 8.8
EPSS 0.19
CVE-2018-8331 HIGH
Microsoft Excel - Remote Code Execution
Sep 13, 2018
CVSS 7.8
EPSS 0.20
CVE-2018-8315 MEDIUM
Internet Explorer 10-11, Edge, ChakraCore - Information Disclosure via Scripting Engine Object Handling
Sep 13, 2018
CVSS 4.2
EPSS 0.03
CVE-2018-8271 MEDIUM
Windows bowser.sys - Information Disclosure via Memory Handling
Sep 13, 2018
CVSS 5.5
EPSS 0.03
CVE-2018-8269 HIGH
Microsoft.Data.OData - Denial of Service via Improper Web Request Handling
Sep 13, 2018
CVSS 7.5
EPSS 0.26
CVE-2018-0965 HIGH
Windows 10 and Windows Server 2016 - Remote Code Execution via Hyper-V Input Validation
Sep 13, 2018
CVSS 8.4
EPSS 0.05
CVE-2018-5391 HIGH
Linux Kernel >=3.9 <4.18 - Denial of Service via IP Fragment Reassembly
Sep 06, 2018
CVSS 7.5
EPSS 0.25
Products
windows_server_2016 4,934 windows_server_2019 4,749 windows_server_2012 4,080 windows_server_2008 3,554 windows_server_2022 3,138 windows_10 2,974 windows_7 2,368 windows_10_21h2 2,344 windows_10_22h2 2,342 windows_10_1809 2,335 windows_8.1 2,216 windows_rt_8.1 2,020 windows_10_1607 1,983 windows_11_24h2 1,728 windows_server_2025 1,702 windows_server_2022_23h2 1,676 windows_11_23h2 1,673 windows_11_22h2 1,652 internet_explorer 1,635 windows_10_1507 1,230 Windows 11 Version 24H2 1,088 Windows Server 2025 1,058 Windows Server 2025 (Server Core installation) 1,058 Windows Server 2022 1,044 office 1,034 Windows Server 2019 1,031 Windows Server 2019 (Server Core installation) 1,028 windows_11_21h2 1,001 windows_11_25h2 996 Windows 10 Version 21H2 990
Quick Filters
Critical CVEs With Exploits In CISA KEV