Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Priority CRITICAL 100KEV

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 G…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.74164 Published 2017-06-15 No fix listed CWE-281
Priority CRITICAL 97KEV

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows loc…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.90026 Published 2017-06-15 No fix listed
TI-2017-00238 CVE-2017-0263 · GHSA-c264-rp8f-rf64

Use after free in Microsoft Windows

Priority CRITICAL 93KEV

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10034 Published 2017-05-12 No fix listed CWE-416
Priority CRITICAL 91KEV

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.84258 Published 2017-05-12 No fix listed
Priority CRITICAL 90KEV

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99693 Published 2017-03-17 No fix listed
Priority CRITICAL 93KEV

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11022 Published 2017-03-17 No fix listed
Priority CRITICAL 93KEV

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03114 Published 2017-03-17 No fix listed
Priority CRITICAL 97KEV

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.64591 Published 2016-11-10 No fix listed
Priority CRITICAL 93KEV

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local use…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.20467 Published 2016-08-09 No fix listed
Priority CRITICAL 93KEV

The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.62823 Published 2016-04-12 No fix listed CWE-269
Priority CRITICAL 93KEV

The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 does not properly…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.37045 Published 2016-03-09 No fix listed CWE-120