microsoft windows 8 vulnerabilities (CVE)

CVE records published for microsoft windows 8, newest first. Follow to get an email when a new one appears.

16 results
8.2High
CVE-2015-2546 KEV Used in ransomware

Microsoft Win32k Memory Corruption Vulnerability

microsoft windows 10 1507; microsoft windows 7; microsoft windows 8; microsoft windows 8.1

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted appl…

10%EPSS
6.6Medium
CVE-2015-1769 KEV

Microsoft Windows Mount Manager Privilege Escalation Vulnerability

microsoft windows 10; microsoft windows 7; microsoft windows 8; microsoft windows 8.1

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers …

4.1%EPSS
8.8High
CVE-2015-2426 KEV

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

microsoft windows 10; microsoft windows 7; microsoft windows 8; microsoft windows 8.1

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attac…

87%EPSS
7.8High
CVE-2015-2387 KEV

Microsoft ATM Font Driver Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users…

35%EPSS
8.8High
CVE-2015-2360 KEV

Microsoft Win32k Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local user…

15%EPSS
9.8Critical
CVE-2015-1635 KEV

Microsoft HTTP.sys Remote Code Execution Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows server 2008

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

100%EPSS
7.8High
CVE-2015-0016 KEV

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attacke…

76%EPSS
8.8High
CVE-2014-6324 KEV

Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows server 2003

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obta…

87%EPSS
8.8High
CVE-2014-6332 KEV

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary c…

95%EPSS
7.8High
CVE-2014-6352 KEV

Microsoft Windows Code Injection Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the…

77%EPSS
8.8High
CVE-2014-4148 KEV

Microsoft Windows Remote Code Execution Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to e…

60%EPSS
7.8High
CVE-2014-4113 KEV

Microsoft Win32k Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain p…

87%EPSS
8.8High
CVE-2014-1812 KEV Used in ransomware

Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows server 2008

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticate…

65%EPSS
8.8High
CVE-2013-3918 KEV

Microsoft Windows Out-of-Bounds Write Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows 8.1; microsoft windows rt

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, a…

74%EPSS
7.8High
CVE-2013-3660 KEV

Microsoft Win32k Privilege Escalation Vulnerability

microsoft windows 7; microsoft windows 8; microsoft windows rt; microsoft windows server 2003

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not prope…

39%EPSS