Microsoft Windows COM Aggregate Marshaler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are operating systems released by Microsoft Corporation USA.Windows COM Aggregate Marshaler is one of the components. An elevation of privilege vulnerability exists in Microsoft Windows COM Aggregate Marshaler. An attacker can exploit this vulnerability an...

Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2018-23924)

Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are both operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is a server operating system. Windows Server 2008 R2 SP1 is a server...

Microsoft Graphics Remote Code Execution Vulnerability

Microsoft Windows Server 2012 R2 and others are a series of server operating systems released by Microsoft Corporation in the U.S. Graphics is one of the graphics components. A remote code execution vulnerability exists in the way memory objects are handled in Microsoft Graphics. A remote attacke...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-23919)

Microsoft Windows Server 2008 SP2 and others are operating systems released by Microsoft Corporation in the U.S. Internet Explorer IE is one of the default browsers that comes with Windows. An information disclosure vulnerability exists in Microsoft IE 9, 10, and 11. A remote attacker could explo...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2018-25390)

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2019 is a set of operating systems used for servers.Windows 10 is a set of operating systems used for personal computers. A local elevation of privileg...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2019-02773)

Microsoft Windows 10 and Windows Server 2019 are both products of Microsoft Corporation, U.S.A. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2019 is a set of server operating systems. An elevation of privilege vulnerability exists in Microsoft Windows 1...

Microsoft Windows Cross-Site Scripting Vulnerability (CNVD-2019-02770)

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation.Microsoft Windows 7 SP1 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A cross-site scripting vulnerability exists in Microsoft...

KB5071812: Servicing stack update for Windows Server 2008 SP2: November 11, 2025

None None...

KB5071810: Servicing stack update for Windows Server 2008 R2 SP1: November 11, 2025

None None...

CVE-2018-8589

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2...

CVE-2018-8589

An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2...

CVE-2018-8592

An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media USB, DVD, etc, aka "Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows Server 2019...

CVE-2018-8584

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC, aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

CVE-2018-8566

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

CVE-2018-8554

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561...

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Window...

CVE-2018-8547

A cross-site-scripting XSS vulnerability exists when an open source customization for Microsoft Active Directory Federation Services AD FS does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Active Directory Federation Services XSS Vulnerability." This...

CVE-2018-8563

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2008 R2...

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Window...

CVE-2018-8565

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...