Browse CVEs

HIGH 7.8 CVE-2018-8453 KEVEPSS 70% An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… Windows 10 1507 Patch available Fix from $1,9502018-10-10 HIGH 7.8 CVE-2018-8440 KEVEPSS 18% An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Eleva… Windows 10 1607 Patch available Fix from $1,9502018-09-13 HIGH 8.8 CVE-2018-8414 KEVEPSS 74% A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution V… Windows 10 1703 Patch available Fix from $1,9502018-08-15 HIGH 7.8 CVE-2018-8405 KEV An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G… Windows 10 1507 Patch available Fix from $1,9502018-08-15 HIGH 7.8 CVE-2018-8406 KEV An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX G… Windows 10 1507 Patch available Fix from $1,9502018-08-15 HIGH 7.5 CVE-2018-8373 KEVEPSS 54% A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engi… Internet Explorer Patch available Fix from $1,9502018-08-15 HIGH 7.5 CVE-2018-8298 KEVEPSS 75% A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory … Chakracore 1.10.1+ Fix from $1,9502018-07-11 HIGH 7.5 CVE-2018-8174 KEVEPSS 89% A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code … Windows 10 1607 Patch available Fix from $1,9502018-05-09 HIGH 7.0 CVE-2018-8120 KEVEPSS 74% An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation… Windows 7 Patch available Fix from $1,9502018-05-09 HIGH 8.8 CVE-2018-0824 KEVEPSS 72% A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM f… Windows 10 1507 Patch available Fix from $1,9502018-05-09 HIGH 8.8 CVE-2018-0798 KEVEPSS 91% Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vuln… Office Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2018-0802 KEVEPSS 87% Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulne… Office Patch available Fix from $1,9502018-01-10 HIGH 7.8 CVE-2017-11882 KEVEPSS 100% Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an … Office Patch available Fix from $1,9502017-11-15 HIGH 7.8 CVE-2017-11826 KEVEPSS 81% Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer… Office Compatibility Pack Patch available Fix from $1,9502017-10-13 HIGH 7.8 CVE-2017-11774 KEVEPSS 60% Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Offic… Outlook Patch available Fix from $1,9502017-10-13 HIGH 7.8 CVE-2017-8759 KEVEPSS 87% Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or app… .net Framework Patch available Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-8570 KEVEPSS 86% Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Exe… Office Patch available Fix from $1,9502017-07-11 CRITICAL 9.8 CVE-2017-8543 KEVEPSS 65% Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, W… Windows 10 1507 Patch available Fix from $2,3002017-06-15 HIGH 8.8 CVE-2017-8464 KEVEPSS 89% Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1… Windows 10 1511 Patch available Fix from $1,9502017-06-15 HIGH 7.8 CVE-2017-8540 KEVEPSS 72% The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window… Malware Protection Engine 1.1.13704.0+ Fix from $1,9502017-05-26 HIGH 7.8 CVE-2017-0262 KEVEPSS 81% Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle ob… Office Patch available Fix from $1,9502017-05-12 HIGH 7.8 CVE-2017-0263 KEVEPSS 10% The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Windows 10 1507 Patch available Fix from $1,9502017-05-12 HIGH 7.8 CVE-2017-0261 KEVEPSS 78% Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle ob… Office Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2017-0222 KEVEPSS 30% A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption V… Internet Explorer Patch available Fix from $1,9502017-05-12 HIGH 7.3 CVE-2017-0213 KEVEPSS 84% Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Windows 10 1507 Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2017-0210 KEVEPSS 20% An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker … Internet Explorer Patch available Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-0199 KEVEPSS 100% Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2… Office Patch available Fix from $1,9502017-04-12 CRITICAL 9.8 CVE-2017-7269 KEVEPSS 100% Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 200… Internet Information Services Patch available Fix from $2,3002017-03-27 HIGH 8.8 CVE-2017-0144 KEVEPSS 99% The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win… Server Message Block 4.0e+ Fix from $1,9502017-03-17 HIGH 8.8 CVE-2017-0145 KEVEPSS 90% The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win… Server Message Block 4.0e+ Fix from $1,9502017-03-17