Windows 8.1

CVEs (2,222)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2019-0736	Microsoft Windows DHCP Client	Cri	0.64	9.8	0.04		Aug 14, 2019	A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an…
CVE-2018-8544	Microsoft Windows Server 2008	Hig	0.64	8.8	0.48		Nov 14, 2018	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2017-8682	Microsoft Word Viewer	Hig	0.64	8.8	0.50		Sep 13, 2017	Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and…
CVE-2017-0005	Microsoft Windows	Hig	0.64	7.8	0.11	KEV	Mar 17, 2017	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…
CVE-2016-7274	Microsoft Windows	Hig	0.64	8.8	0.42		Dec 20, 2016	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
CVE-2016-0170	Microsoft Windows	Hig	0.64	8.8	0.49		May 11, 2016	GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…
CVE-2016-0145	Microsoft Office	Hig	0.64	8.8	0.43		Apr 12, 2016	The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…
CVE-2022-41125	Microsoft Windows CNG Key Isolation Service	Hig	0.63	7.8	0.03	KEV	Nov 9, 2022	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41033	Microsoft COM+ Event System Service	Hig	0.63	7.8	0.02	KEV	Oct 11, 2022	Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2021-43226	Microsoft Windows Common Log File System Driver	Hig	0.63	7.8	0.03	KEV	Dec 15, 2021	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-33771	Microsoft Windows Kernel	Hig	0.63	7.8	0.10	KEV	Jul 14, 2021	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979	Microsoft Windows Kernel	Hig	0.63	7.8	0.05	KEV	Jul 14, 2021	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-17087	Microsoft Windows Kernel	Hig	0.63	7.8	0.05	KEV	Nov 11, 2020	Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-1027	Microsoft Windows Kernel	Hig	0.63	7.8	0.05	KEV	Apr 15, 2020	An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVE-2019-1214	Microsoft Windows Common Log File System Driver	Hig	0.63	7.8	0.01	KEV	Sep 11, 2019	An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
CVE-2019-1150	Microsoft Windows	Hig	0.63	8.8	0.26		Aug 14, 2019	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…
CVE-2019-0880	Microsoft splwow64.exe	Hig	0.63	7.8	0.02	KEV	Jul 15, 2019	A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
CVE-2019-0859	Microsoft Windows	Hig	0.63	7.8	0.04	KEV	Apr 9, 2019	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
CVE-2019-0797	Microsoft Win32K	Hig	0.63	7.8	0.02	KEV	Apr 9, 2019	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
CVE-2019-0618	Microsoft Windows Graphics Device Interface	Hig	0.63	8.8	0.67		Mar 5, 2019	A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.

CVE-2019-0736CriAug 14, 2019
Microsoft
Windows DHCP Client
risk 0.64cvss 9.8epss 0.04
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an…
CVE-2018-8544HigNov 14, 2018
Microsoft
Windows Server 2008
risk 0.64cvss 8.8epss 0.48
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server…
CVE-2017-8682HigSep 13, 2017
Microsoft
Word Viewer
risk 0.64cvss 8.8epss 0.50
Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and…
CVE-2017-0005HigKEVMar 17, 2017
Microsoft
Windows
risk 0.64cvss 7.8epss 0.11
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted…
CVE-2016-7274HigDec 20, 2016
Microsoft
Windows
risk 0.64cvss 8.8epss 0.42
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web…
CVE-2016-0170HigMay 11, 2016
Microsoft
Windows
risk 0.64cvss 8.8epss 0.49
GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted document, aka "Windows Graphics…
CVE-2016-0145HigApr 12, 2016
Microsoft
Office
risk 0.64cvss 8.8epss 0.43
The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, and 3.5.1; Skype…
CVE-2022-41125HigKEVNov 9, 2022
Microsoft
Windows CNG Key Isolation Service
risk 0.63cvss 7.8epss 0.03
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41033HigKEVOct 11, 2022
Microsoft
COM+ Event System Service
risk 0.63cvss 7.8epss 0.02
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2021-43226HigKEVDec 15, 2021
Microsoft
Windows Common Log File System Driver
risk 0.63cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-33771HigKEVJul 14, 2021
Microsoft
Windows Kernel
risk 0.63cvss 7.8epss 0.10
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979HigKEVJul 14, 2021
Microsoft
Windows Kernel
risk 0.63cvss 7.8epss 0.05
Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-17087HigKEVNov 11, 2020
Microsoft
Windows Kernel
risk 0.63cvss 7.8epss 0.05
Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-1027HigKEVApr 15, 2020
Microsoft
Windows Kernel
risk 0.63cvss 7.8epss 0.05
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVE-2019-1214HigKEVSep 11, 2019
Microsoft
Windows Common Log File System Driver
risk 0.63cvss 7.8epss 0.01
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.
CVE-2019-1150HigAug 14, 2019
Microsoft
Windows
risk 0.63cvss 8.8epss 0.26
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view,…
CVE-2019-0880HigKEVJul 15, 2019
Microsoft
splwow64.exe
risk 0.63cvss 7.8epss 0.02
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
CVE-2019-0859HigKEVApr 9, 2019
Microsoft
Windows
risk 0.63cvss 7.8epss 0.04
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0803.
CVE-2019-0797HigKEVApr 9, 2019
Microsoft
Win32K
risk 0.63cvss 7.8epss 0.02
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.
CVE-2019-0618HigMar 5, 2019
Microsoft
Windows Graphics Device Interface
risk 0.63cvss 8.8epss 0.67
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0662.

Page 6 of 112