Windows 8.1@- Security Vulnerabilities and Issues — Page 6 of Windows 8.1@- CVE List

Lucene search

MicrosoftWindows 8.1-

1841 matches found

CVE•added 2019/08/14 9:15 p.m.•181 views

CVE-2019-1151

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; ...

9.3CVSS9.1AI score0.33915EPSS

CVE•added 2020/08/17 7:15 p.m.•181 views

CVE-2020-1530

An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.The security updat...

7.8CVSS8.3AI score0.00594EPSS

CVE•added 2021/10/13 1:15 a.m.•181 views

CVE-2021-26441

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.9AI score0.00352EPSS

CVE•added 2022/01/11 9:15 p.m.•181 views

CVE-2022-21836

Windows Certificate Spoofing Vulnerability

7.8CVSS8.6AI score0.00692EPSS

CVE•added 2022/07/12 11:15 p.m.•181 views

CVE-2022-22042

Windows Hyper-V Information Disclosure Vulnerability

6.5CVSS7.1AI score0.18303EPSS

CVE•added 2022/05/10 9:15 p.m.•181 views

CVE-2022-29139

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.09236EPSS

CVE•added 2022/06/15 10:15 p.m.•181 views

CVE-2022-30135

Windows Media Center Elevation of Privilege Vulnerability

7.8CVSS7.8AI score0.00395EPSS

CVE•added 2023/01/10 10:15 p.m.•181 views

CVE-2023-21535

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

8.1CVSS8.1AI score0.00117EPSS

CVE•added 2023/01/10 10:15 p.m.•181 views

CVE-2023-21552

Windows GDI Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.01487EPSS

CVE•added 2019/07/15 7:15 p.m.•180 views

CVE-2019-1094

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.

6.5CVSS6.1AI score0.12437EPSS

CVE•added 2020/02/11 10:15 p.m.•180 views

CVE-2020-0689

A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.

6.7CVSS6.8AI score0.00158EPSS

CVE•added 2022/08/09 8:15 p.m.•180 views

CVE-2022-33670

Windows Partition Management Driver Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.0098EPSS

CVE•added 2019/01/08 9:29 p.m.•179 views

CVE-2019-0538

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS

CVE•added 2019/07/15 7:15 p.m.•179 views

CVE-2019-1096

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS5.6AI score0.23126EPSS

CVE•added 2022/01/11 9:15 p.m.•179 views

CVE-2022-21920

Windows Kerberos Elevation of Privilege Vulnerability

9CVSS8.9AI score0.08026EPSS

CVE•added 2022/04/15 7:15 p.m.•179 views

CVE-2022-26801

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00373EPSS

CVE•added 2022/10/11 7:15 p.m.•179 views

CVE-2022-41081

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.02826EPSS

CVE•added 2022/04/15 7:15 p.m.•178 views

CVE-2022-24530

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00271EPSS

CVE•added 2019/07/15 7:15 p.m.•177 views

CVE-2019-1086

An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1087, CVE-2019-1088.

7.8CVSS7.6AI score0.00278EPSS

CVE•added 2022/07/12 11:15 p.m.•177 views

CVE-2022-22025

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

7.5CVSS7.9AI score0.46506EPSS

CVE•added 2020/10/16 11:15 p.m.•176 views

CVE-2020-16933

A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file co...

8.8CVSS6.6AI score0.0284EPSS

CVE•added 2018/11/14 1:29 a.m.•175 views

CVE-2018-8256

A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution Vulnerability." This affects Windows RT 8.1, PowerShell Core 6.0, Microsoft.PowerShell.Archive 1.2.2.0, Windows Server 2016, Windows Server 2012, ...

9.3CVSS7.7AI score0.17485EPSS

CVE•added 2022/03/09 5:15 p.m.•175 views

CVE-2022-21973

Windows Media Center Update Denial of Service Vulnerability

5.5CVSS6.1AI score0.00141EPSS

CVE•added 2022/05/10 9:15 p.m.•175 views

CVE-2022-23270

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

9.3CVSS9AI score0.52352EPSS

CVE•added 2022/10/11 7:15 p.m.•175 views

CVE-2022-37986

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00275EPSS

CVE•added 2022/10/11 7:15 p.m.•175 views

CVE-2022-38044

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.2573EPSS

CVE•added 2022/11/09 10:15 p.m.•174 views

CVE-2022-41039

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.5AI score0.00114EPSS

CVE•added 2022/09/13 7:15 p.m.•173 views

CVE-2022-34729

Windows GDI Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.03937EPSS

CVE•added 2022/10/11 7:15 p.m.•173 views

CVE-2022-38029

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.6AI score0.04334EPSS

CVE•added 2022/10/11 7:15 p.m.•173 views

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00477EPSS

CVE•added 2022/04/15 7:15 p.m.•172 views

CVE-2022-24474

Windows Win32k Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00378EPSS

CVE•added 2022/09/13 7:15 p.m.•172 views

CVE-2022-37958

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

8.1CVSS8.8AI score0.07629EPSS

CVE•added 2023/04/27 7:15 p.m.•172 views

CVE-2023-21712

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00731EPSS

CVE•added 2020/10/16 11:15 p.m.•171 views

CVE-2020-16923

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system.To exploit the vulnerability, a user would have to open a specially crafted f...

7.8CVSS8.3AI score0.08517EPSS

CVE•added 2022/07/12 11:15 p.m.•171 views

CVE-2022-22027

Windows Fax Service Remote Code Execution Vulnerability

7.8CVSS8.3AI score0.02259EPSS

CVE•added 2022/04/15 7:15 p.m.•171 views

CVE-2022-24499

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00285EPSS

CVE•added 2019/08/14 9:15 p.m.•170 views

CVE-2019-1155

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS

CVE•added 2019/09/11 10:15 p.m.•170 views

CVE-2019-1244

An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

6.5CVSS6.2AI score0.27638EPSS

CVE•added 2022/07/12 11:15 p.m.•170 views

CVE-2022-22023

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

6.9CVSS7.3AI score0.00399EPSS

CVE•added 2022/04/15 7:15 p.m.•170 views

CVE-2022-26803

Windows Print Spooler Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00583EPSS

CVE•added 2022/06/15 10:15 p.m.•170 views

CVE-2022-30151

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7CVSS7.7AI score0.00326EPSS

CVE•added 2023/01/10 10:15 p.m.•170 views

CVE-2023-21776

Windows Kernel Information Disclosure Vulnerability

5.5CVSS5.5AI score0.00564EPSS

CVE•added 2022/01/11 9:15 p.m.•169 views

CVE-2022-21859

Windows Accounts Control Elevation of Privilege Vulnerability

7CVSS7.9AI score0.00351EPSS

CVE•added 2022/05/10 9:15 p.m.•169 views

CVE-2022-29141

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.11044EPSS

CVE•added 2022/10/11 7:15 p.m.•169 views

CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.07516EPSS

CVE•added 2015/03/06 5:59 p.m.•168 views

CVE-2015-1637

Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict TLS state transitions, which makes it easier for ...

4.3CVSS6.2AI score0.88519EPSS

CVE•added 2022/01/11 9:15 p.m.•168 views

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00444EPSS

CVE•added 2022/06/15 10:15 p.m.•168 views

CVE-2022-30146

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

7.5CVSS8.2AI score0.04279EPSS

CVE•added 2023/01/10 10:15 p.m.•168 views

CVE-2023-21561

Microsoft Cryptographic Services Elevation of Privilege Vulnerability