Windows 8.1 Security Vulnerabilities and Issues — Page 24 of Windows 8.1 CVE List

Lucene search

MicrosoftWindows 8.1

2224 matches found

CVE•added 2018/03/14 5:29 p.m.•105 views

CVE-2018-0813

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way obje...

5.5CVSS4.8AI score0.06807EPSS

CVE•added 2018/06/14 12:29 p.m.•105 views

CVE-2018-8207

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serv...

4.7CVSS5.3AI score0.01934EPSS

CVE•added 2018/09/13 12:29 a.m.•105 views

CVE-2018-8419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Win...

5.5CVSS5.5AI score0.04881EPSS

CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8486

An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows S...

5.5CVSS5.8AI score0.01054EPSS

CVE•added 2018/10/10 1:29 p.m.•105 views

CVE-2018-8489

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Wind...

8.4CVSS7.8AI score0.00751EPSS

CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0894

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0889, CVE-2019-0890, CVE-2019-0891, CVE-2019-0893, CVE-2019-0895, CVE-2019-0896,...

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/05/16 7:29 p.m.•105 views

CVE-2019-0895

9.3CVSS8.1AI score0.29592EPSS

CVE•added 2019/10/10 2:15 p.m.•105 views

CVE-2019-1344

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.08119EPSS

CVE•added 2020/01/14 11:15 p.m.•105 views

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639.

5.5CVSS6.6AI score0.00681EPSS

CVE•added 2020/04/15 3:15 p.m.•105 views

CVE-2020-1011

An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1015.

7.8CVSS7.8AI score0.08877EPSS

CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1251

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1253, CVE-2020-1310.

7.2CVSS7AI score0.00798EPSS

CVE•added 2020/06/09 8:15 p.m.•105 views

CVE-2020-1270

An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.

7.8CVSS8.1AI score0.00681EPSS

CVE•added 2020/08/17 7:15 p.m.•105 views

CVE-2020-1534

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The ...

7.8CVSS8.2AI score0.13239EPSS

CVE•added 2020/10/16 11:15 p.m.•105 views

CVE-2020-16889

An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log ...

5.5CVSS6.6AI score0.01039EPSS

CVE•added 2021/01/12 8:15 p.m.•105 views

CVE-2021-1671

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/02/25 11:15 p.m.•105 views

CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability

6.5CVSS7.8AI score0.20715EPSS

CVE•added 2021/02/25 11:15 p.m.•105 views

CVE-2021-25195

Windows PKU2U Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00152EPSS

CVE•added 2021/09/15 12:15 p.m.•105 views

CVE-2021-36969

Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00448EPSS

CVE•added 2021/11/10 1:19 a.m.•105 views

CVE-2021-41370

NTFS Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00193EPSS

CVE•added 2022/10/11 7:15 p.m.•105 views

CVE-2022-30198

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00247EPSS

CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35834

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

8.8CVSS9.5AI score0.03169EPSS

CVE•added 2022/09/13 7:15 p.m.•105 views

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.04156EPSS

CVE•added 2022/12/13 7:15 p.m.•105 views

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

7.8CVSS8.1AI score0.00288EPSS

CVE•added 2015/08/15 12:59 a.m.•104 views

CVE-2015-2464

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight b...

9.3CVSS7.3AI score0.52873EPSS

CVE•added 2015/11/11 12:59 p.m.•104 views

CVE-2015-6111

IPSec in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles encryption negotiation, which allows remote authenticated users to cause a denial of service (system hang) via crafted IP traffic, aka "Windows IPSec Denial o...

6.8CVSS6.3AI score0.01433EPSS

CVE•added 2017/04/12 2:59 p.m.•104 views

CVE-2017-0162

A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Executi...

7.6CVSS8AI score0.00421EPSS

CVE•added 2018/03/14 5:29 p.m.•104 views

CVE-2018-0896

4.7CVSS4.7AI score0.06807EPSS

CVE•added 2018/05/09 7:29 p.m.•104 views

CVE-2018-8134

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

7CVSS7.5AI score0.07473EPSS

CVE•added 2018/06/14 12:29 p.m.•104 views

CVE-2018-8169

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server ...

7CVSS7.6AI score0.01451EPSS

CVE•added 2018/07/11 12:29 a.m.•104 views

CVE-2018-8307

A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects, aka "WordPad Security Feature Bypass Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2...

6.8CVSS6.5AI score0.01151EPSS

CVE•added 2019/05/16 7:29 p.m.•104 views

CVE-2019-0961

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882.

6.5CVSS6.2AI score0.25343EPSS

CVE•added 2019/06/12 2:29 p.m.•104 views

CVE-2019-1028

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS8.2AI score0.00299EPSS

CVE•added 2019/09/11 10:15 p.m.•104 views

CVE-2019-1252

6.5CVSS6.7AI score0.3045EPSS

CVE•added 2019/10/10 2:15 p.m.•104 views

CVE-2019-1359

9.3CVSS8.8AI score0.58897EPSS

CVE•added 2019/12/10 10:15 p.m.•104 views

CVE-2019-1466

6.5CVSS6.7AI score0.26055EPSS

CVE•added 2020/03/12 4:15 p.m.•104 views

CVE-2020-0791

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.

7.8CVSS8.1AI score0.00526EPSS

CVE•added 2020/06/09 8:15 p.m.•104 views

CVE-2020-0916

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915.

7.8CVSS8.1AI score0.00428EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1542

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security u...

7.8CVSS8.1AI score0.00513EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1545

7.8CVSS8.1AI score0.00514EPSS

CVE•added 2020/08/17 7:15 p.m.•104 views

CVE-2020-1546

7.8CVSS8.1AI score0.00514EPSS

CVE•added 2020/10/16 11:15 p.m.•104 views

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then insta...

7.8CVSS8.2AI score0.0066EPSS

CVE•added 2020/11/11 7:15 a.m.•104 views

CVE-2020-17043

Windows Remote Access Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.0452EPSS

CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1637

Windows DNS Query Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00437EPSS

CVE•added 2021/01/12 8:15 p.m.•104 views

CVE-2021-1668

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability