Microsoft Windows 8.1 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows 8.1, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

CVE-2014-6321 — CVSS 10.0 (critical): Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…
CVE-2020-1467 — CVSS 10.0 (critical): An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this…
CVE-2015-0014 — CVSS 10.0 (critical): Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…
CVE-2021-26424 — CVSS 9.9 (critical): Windows TCP/IP Remote Code Execution Vulnerability
CVE-2019-1384 — CVSS 9.9 (critical): A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this…
CVE-2021-28476 — CVSS 9.9 (critical): Windows Hyper-V Remote Code Execution Vulnerability
CVE-2019-1365 — CVSS 9.9 (critical): An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to…
CVE-2020-1112 — CVSS 9.9 (critical): An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly…
CVE-2022-35744 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2016-7182 — CVSS 9.8 (critical): The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…
CVE-2022-34721 — CVSS 9.8 (critical): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2019-1182 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated…
CVE-2019-1181 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated…
CVE-2022-29130 — CVSS 9.8 (critical): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2017-8589 — CVSS 9.8 (critical): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold…
CVE-2021-26432 — CVSS 9.8 (critical): Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
CVE-2021-43215 — CVSS 9.8 (critical): iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
CVE-2022-34718 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
CVE-2019-0736 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An…
CVE-2017-11771 — CVSS 9.8 (critical): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
CVE-2021-24074 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
CVE-2016-3236 — CVSS 9.8 (critical): The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
CVE-2022-24497 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
CVE-2021-24077 — CVSS 9.8 (critical): Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-24491 — CVSS 9.8 (critical): Windows Network File System Remote Code Execution Vulnerability
CVE-2021-24094 — CVSS 9.8 (critical): Windows TCP/IP Remote Code Execution Vulnerability
CVE-2017-8543 — CVSS 9.8 (critical) — actively exploited: Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1…
CVE-2022-30133 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-34722 — CVSS 9.8 (critical): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-22012 — CVSS 9.8 (critical): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2019-0626 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP…
CVE-2022-26809 — CVSS 9.8 (critical): Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2019-1212 — CVSS 9.8 (critical): A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who…
CVE-2015-1635 — CVSS 9.8 (critical) — actively exploited: HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote…
CVE-2021-31962 — CVSS 9.4 (critical): Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2015-2463 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2435 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2014-1824 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-2430 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-1696 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-1675 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2461 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2015-2459 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2015-1697 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-1756 — CVSS 9.3 (critical): Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
CVE-2015-2458 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2015-0088 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2013-5056 — CVSS 9.3 (critical): Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows…
CVE-2015-6131 — CVSS 9.3 (critical): Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary…
CVE-2013-3940 — CVSS 9.3 (critical): Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2…
CVE-2015-1695 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2514 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-2530 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2014-4118 — CVSS 9.3 (critical): XML Core Services (aka MSXML) 3.0 in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
CVE-2015-1698 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2506 — CVSS 9.3 (critical): atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2015-0090 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2015-0091 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2014-1817 — CVSS 9.3 (critical): usp10.dll in Uniscribe (aka the Unicode Script Processor) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2…
CVE-2015-6103 — CVSS 9.3 (critical): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
CVE-2015-0092 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2015-0093 — CVSS 9.3 (critical): Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2015-6104 — CVSS 9.3 (critical): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
CVE-2015-2456 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2014-0263 — CVSS 9.3 (critical): The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…
CVE-2015-2455 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2016-0088 — CVSS 9.3 (critical): Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the…
CVE-2015-6107 — CVSS 9.3 (critical): The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows…
CVE-2015-0096 — CVSS 9.3 (critical): Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
CVE-2014-0301 — CVSS 9.3 (critical): Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2…
CVE-2015-6108 — CVSS 9.3 (critical): The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows…
CVE-2015-2513 — CVSS 9.3 (critical): Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server…
CVE-2015-0081 — CVSS 9.3 (critical): Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2015-2429 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2519 — CVSS 9.3 (critical): Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…
CVE-2014-1818 — CVSS 9.3 (critical): GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…
CVE-2015-1699 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2464 — CVSS 9.3 (critical): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2015-2462 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2015-2509 — CVSS 9.3 (critical): Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to…
CVE-2015-2515 — CVSS 9.3 (critical): Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8…
CVE-2015-2432 — CVSS 9.3 (critical): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
CVE-2019-0719 — CVSS 9.1 (critical): A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an…
CVE-2022-21901 — CVSS 9.0 (critical): Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2014-4148 — CVSS 8.8 (high) — actively exploited: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…
CVE-2021-34481 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An…
CVE-2022-34691 — CVSS 8.8 (high): Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2020-1061 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script…
CVE-2019-1060 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2023-21549 — CVSS 8.8 (high): Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-21732 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2016-0098 — CVSS 8.8 (high): Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow…
CVE-2015-2426 — CVSS 8.8 (high) — actively exploited: Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1…
CVE-2016-0101 — CVSS 8.8 (high): Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and…
CVE-2020-0964 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2021-33756 — CVSS 8.8 (high): Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33752 — CVSS 8.8 (high): Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33750 — CVSS 8.8 (high): Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33749 — CVSS 8.8 (high): Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2019-1102 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2016-0121 — CVSS 8.8 (high): The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…
CVE-2022-30221 — CVSS 8.8 (high): Windows Graphics Component Remote Code Execution Vulnerability
CVE-2019-1144 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2019-1145 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2017-0084 — CVSS 8.8 (high): Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2018-0824 — CVSS 8.8 (high) — actively exploited: A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka…
CVE-2019-1149 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2019-1150 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2019-1151 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2019-1152 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker…
CVE-2016-0145 — CVSS 8.8 (high): The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold…
CVE-2021-31194 — CVSS 8.8 (high): OLE Automation Remote Code Execution Vulnerability
CVE-2019-0552 — CVSS 8.8 (high): An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects…
CVE-2021-1658 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-21922 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-21920 — CVSS 8.8 (high): Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-29141 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-29139 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-21857 — CVSS 8.8 (high): Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-21851 — CVSS 8.8 (high): Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-21850 — CVSS 8.8 (high): Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-29137 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2019-0618 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2020-1300 — CVSS 8.8 (high): A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an…
CVE-2022-41048 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41047 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2020-1067 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution…
CVE-2019-0630 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain…
CVE-2019-0633 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain…
CVE-2020-17162 — CVSS 8.8 (high): Microsoft Windows Security Feature Bypass Vulnerability
CVE-2017-8464 — CVSS 8.8 (high) — actively exploited: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2022-29131 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2019-0662 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2020-17042 — CVSS 8.8 (high): Windows Print Spooler Remote Code Execution Vulnerability
CVE-2022-34734 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34733 — CVSS 8.8 (high): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2016-3345 — CVSS 8.8 (high): The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold…
CVE-2021-42275 — CVSS 8.8 (high): Microsoft COM for Windows Remote Code Execution Vulnerability
CVE-2022-34732 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34731 — CVSS 8.8 (high): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2019-0722 — CVSS 8.8 (high): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
CVE-2016-3352 — CVSS 8.8 (high): Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which…
CVE-2022-34730 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2016-3368 — CVSS 8.8 (high): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT…
CVE-2022-29129 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-29128 — CVSS 8.8 (high): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2019-0756 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2019-0765 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution…
CVE-2020-1301 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain…
CVE-2019-0772 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
CVE-2022-34727 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-34726 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2017-8527 — CVSS 8.8 (high): Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…
CVE-2019-0787 — CVSS 8.8 (high): A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
CVE-2019-0788 — CVSS 8.8 (high): A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
CVE-2019-0790 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2019-0791 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2019-0792 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2019-0793 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2019-0794 — CVSS 8.8 (high): A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code…
CVE-2019-0795 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote…
CVE-2017-8528 — CVSS 8.8 (high): Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…
CVE-2020-0881 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2016-7205 — CVSS 8.8 (high): Animation Manager in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1…
CVE-2021-40444 — CVSS 8.8 (high) — actively exploited: Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware…
CVE-2019-0842 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
CVE-2020-16911 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
CVE-2019-0845 — CVSS 8.8 (high): A remote code execution vulnerability exists when the IOleCvt interface renders ASP webpage content, aka 'Windows IOleCvt Interface Remote…
CVE-2022-38045 — CVSS 8.8 (high): Windows Server Service Elevation of Privilege Vulnerability
CVE-2021-38666 — CVSS 8.8 (high): Remote Desktop Client Remote Code Execution Vulnerability
CVE-2019-0853 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2020-16891 — CVSS 8.8 (high): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an…
CVE-2020-1020 — CVSS 8.8 (high) — actively exploited: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a…
CVE-2016-7217 — CVSS 8.8 (high): Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows…
CVE-2022-26923 — CVSS 8.8 (high) — actively exploited: Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-38040 — CVSS 8.8 (high): Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2019-0888 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory. An attacker who…
CVE-2021-36970 — CVSS 8.8 (high): Windows Print Spooler Spoofing Vulnerability
CVE-2017-8590 — CVSS 8.8 (high): Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold…
CVE-2021-36965 — CVSS 8.8 (high): Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVE-2015-2360 — CVSS 8.8 (high) — actively exploited: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2…
CVE-2017-8664 — CVSS 8.8 (high): Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server…
CVE-2022-38034 — CVSS 8.8 (high): Windows Workstation Service Elevation of Privilege Vulnerability
CVE-2019-0902 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
CVE-2019-0903 — CVSS 8.8 (high) — actively exploited: A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka…
CVE-2021-36947 — CVSS 8.8 (high): Windows Print Spooler Remote Code Execution Vulnerability
CVE-2016-7256 — CVSS 8.8 (high) — actively exploited: atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1…
CVE-2021-36936 — CVSS 8.8 (high): Windows Print Spooler Remote Code Execution Vulnerability
CVE-2022-38031 — CVSS 8.8 (high): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-41128 — CVSS 8.8 (high) — actively exploited: Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2021-34535 — CVSS 8.8 (high): Remote Desktop Client Remote Code Execution Vulnerability
CVE-2020-1317 — CVSS 8.8 (high): An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege…
CVE-2016-7272 — CVSS 8.8 (high): The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
CVE-2021-34527 — CVSS 8.8 (high) — actively exploited: A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An…
CVE-2017-8682 — CVSS 8.8 (high): Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT…
CVE-2016-7274 — CVSS 8.8 (high): Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
CVE-2018-1016 — CVSS 8.8 (high): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
CVE-2021-28330 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-28329 — CVSS 8.8 (high): Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2019-1333 — CVSS 8.8 (high): A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…