Vulnerability index

Browse CVEs

3,025 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Windows 10 HIGH 7.8
CVE-2018-8343

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buff…

Mitigation only
Fix from $1,950 2018-08-15
Windows 10 HIGH 7.5
CVE-2018-8345EPSS 14%

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote…

Mitigation only
Fix from $1,950 2018-08-15
Windows 10 HIGH 7.0
CVE-2018-8339

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an ins…

Mitigation only
Fix from $1,950 2018-08-15
Lync HIGH 8.8
CVE-2018-8311EPSS 17%

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, …

Mitigation only
Fix from $1,950 2018-07-11
Windows 10 HIGH 7.8
CVE-2018-8282

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k…

Mitigation only
Fix from $1,950 2018-07-11
Windows Calendar MEDIUM 6.5
CVE-2018-8305EPSS 8%

An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client Information Disclosure Vulne…

Mitigation only
Fix from $1,600 2018-07-11
.net Framework HIGH 8.8
CVE-2018-8260EPSS 15%

A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remot…

Mitigation only
Fix from $1,950 2018-07-11
Forefront Unified Access Gateway CRITICAL 9.8
CVE-2018-12571EPSS 30%

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries fo…

No fix yet
Fix from $2,300 2018-07-05
Onedrive HIGH 7.8
CVE-2018-0592EPSS 5%

Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Mitigation only
Fix from $1,950 2018-06-26
Onedrive HIGH 7.8
CVE-2018-0593EPSS 5%

Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspeci…

Mitigation only
Fix from $1,950 2018-06-26
Skype HIGH 7.8
CVE-2018-0594EPSS 5%

Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Mitigation only
Fix from $1,950 2018-06-26
Skype HIGH 7.8
CVE-2018-0595EPSS 5%

Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecif…

Mitigation only
Fix from $1,950 2018-06-26
Visual Studio Community HIGH 7.8
CVE-2018-0596EPSS 5%

Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an un…

Mitigation only
Fix from $1,950 2018-06-26
Visual Studio Code HIGH 7.8
CVE-2018-0597EPSS 5%

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspeci…

Mitigation only
Fix from $1,950 2018-06-26
Windows HIGH 7.8
CVE-2018-0598EPSS 9%

Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain pr…

Mitigation only
Fix from $1,950 2018-06-26
Windows 10 HIGH 8.1
CVE-2018-8225EPSS 24%

A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Wind…

Mitigation only
Fix from $1,950 2018-06-14
Windows 10 HIGH 7.0
CVE-2018-1036

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Wind…

Mitigation only
Fix from $1,950 2018-06-14
Windows 10 HIGH 7.0
CVE-2018-8169

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memory, aka …

Mitigation only
Fix from $1,950 2018-06-14
Windows 10 MEDIUM 5.5
CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affec…

Mitigation only
Fix from $1,600 2018-06-14
Windows 10 MEDIUM 5.3
CVE-2018-1040EPSS 7%

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denia…

Mitigation only
Fix from $1,600 2018-06-14
Windows 10 HIGH 7.0
CVE-2018-8124

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…

Mitigation only
Fix from $1,950 2018-05-09
Windows 7 HIGH 7.0
CVE-2018-7249

An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped i…

No fix yet
Fix from $1,950 2018-02-26
Windows 7 MEDIUM 5.5
CVE-2018-7250

An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped i…

Mitigation only
Fix from $1,600 2018-02-26
Chakracore HIGH 7.5
CVE-2018-0858EPSS 15%

ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruptio…

Mitigation only
Fix from $1,950 2018-02-15
Chakracore HIGH 7.5
CVE-2018-0859EPSS 18%

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how …

No fix yet
Fix from $1,950 2018-02-15
Chakracore HIGH 7.5
CVE-2018-0834EPSS 55%

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how …

No fix yet
Fix from $1,950 2018-02-15
Chakracore HIGH 7.5
CVE-2018-0818

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a targe…

Mitigation only
Fix from $1,950 2018-01-10
Windows 10 HIGH 7.1
CVE-2018-0751

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Win…

No fix yet
Fix from $1,950 2018-01-04
Windows 10 HIGH 7.0
CVE-2018-0744EPSS 15%

The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows…

No fix yet
Fix from $1,950 2018-01-04
Windows 10 MEDIUM 5.9
CVE-2018-0753EPSS 9%

Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 …

Mitigation only
Fix from $1,600 2018-01-04