Sploitus

71 exploited vulnerabilities in Windows 8

Showing 1–50 of 71, highest-scoring first

Vendors
Microsoft, Dokanfs, Nomachine, Adobe
With known exploits
71
Affected Microsoft Windows 7 versions
All versions
Affected Microsoft Windows 8 versions
All versions
Affected Microsoft Windows 8.1 versions
All versions
Affected Microsoft Windows Server 2008 versions
All versions
Affected Microsoft Windows Server 2012 versions
All versions
Affected Microsoft Windows 10 1511 versions
All versions
Affected Microsoft Windows 10 1607 versions
All versions
Affected Microsoft Windows 10 1703 versions
All versions

Vulnerabilities with exploits

Highest CVSS first β€” 48 of these already have exploit code on Sploitus

CVE-2017-8543
CVSS 10.0 CRITICAL 2017-06-13FIX AVAILABLE
CVE-2015-1635 17 exploits
CVSS 10.0 CRITICAL 2015-04-14FIX AVAILABLE
Exploit for Code Injection in MicrosoftMS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure
CVE-2014-6321
CVSS 10.0 HIGH 2014-11-11FIX AVAILABLE
CVE-2017-8464 20 exploits
CVSS 9.3 HIGH 2017-06-13
Exploit for CVE-2017-0213Exploit for CVE-2017-0213
CVE-2016-0015 2 exploits
CVSS 9.3 HIGH 2016-01-12FIX AVAILABLE
Microsoft Windows devenum.dll!DeviceMoniker::Load() - Heap Corruption Buffer Underflow (MS16-007)Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
CVE-2015-2464 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
CVE-2015-2463 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory AccessMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
CVE-2015-2462 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
CVE-2015-2460 3 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory AccessWindows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access Exploit
CVE-2015-2459 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access ExploitMicrosoft Windows - 'ATMFD.DLL' CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
CVE-2015-2456 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow ExploiMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
CVE-2015-2455 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
CVE-2015-2432 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Write to Uninitialized Address Due to Malformed CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Write to Uninitialized Address Due to Malformed CFF Table
CVE-2015-0096 17 exploits
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows LNK File Code Execution ExploitMicrosoft Windows LNK File Code Execution
CVE-2015-0081 1 exploit
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows - Text Services Memory Corruption (MS15-020)
CVE-2015-6131 3 exploits
CVSS 9.3 HIGH 2015-12-08
Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MCMicrosoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File
CVE-2014-6352 15 exploits
CVSS 9.3 HIGH 2014-10-21
Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-ExecutionMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2014-4114 24 exploits
CVSS 9.3 HIGH 2014-10-14
Windows-OLE-Package-ManagerMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2013-3174 5 exploits
CVSS 9.3 HIGH 2013-07-09FIX AVAILABLE
DirectShow Arbitrary Memory Overwrite Vulnerability (MS13-056)Microsoft DirectShow - Arbitrary Memory Overwrite (MS13-056)
CVE-2014-6324 9 exploits
CVSS 9.0 HIGH 2014-11-18FIX AVAILABLE
Exploit for CVE-2014-6324Kerberos 5-1.21.3 Privilege Escalation / Ticket Injection
CVE-2013-3918 4 exploits
CVSS 8.8 HIGH 2013-11-12FIX AVAILABLE
Microsoft Internet Explorer - CardSpaceClaimCollection ActiveX Integer Underflow (MS13-090) (Metasploit)MS13-090 CardSpaceClaimCollection ActiveX Integer Underflow
CVE-2015-0008 4 exploits
CVSS 8.3 HIGH 2015-02-10FIX AVAILABLE
Microsoft Windows Server 2012 - (Group Policy) Remote Code Execution ExploitMicrosoft Windows Server 2012 - Group Policy Remote Code Execution
CVE-2018-6947 5 exploits
CVSS 7.8 HIGH 2018-02-20
NoMachine nxfuse Privilege EscalationNoMachine x64 < 6.0.80 - nxfuse Privilege Escalation Exploit
CVE-2016-0007 4 exploits
CVSS 7.8 HIGH 2016-01-13FIX AVAILABLE
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (2) (MS16-008)Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)
CVE-2016-0016 2 exploits
CVSS 7.8 HIGH 2016-01-12FIX AVAILABLE
Microsoft Office - COM Object DLL Planting with WMALFXGFXDSP.dll (MS16-007)Microsoft Office / COM Object - 'WMALFXGFXDSP.dll' DLL Planting (MS16-007)
CVE-2016-0006 2 exploits
CVSS 7.3 HIGH 2016-01-12FIX AVAILABLE
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (1) (MS16-008)Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)
CVE-2015-0057 5 exploits
CVSS 7.2 HIGH 2015-02-10FIX AVAILABLE
Microsoft Windows Win32k η‰Ήζƒζε‡ζΌζ΄ž( MS15-010)Microsoft Windows 8.1 - 'win32k' Privilege Escalation (MS15-010)
CVE-2015-0004 2 exploits
CVSS 7.2 HIGH 2015-01-13FIX AVAILABLE
Windows 8.1 (32/64 bit) - Privilege Escalation (User Profile Service) (MS15-003)Microsoft Windows < 8.1 (x86/x64) - User Profile Service Privilege Escalation (MS15-003)
CVE-2015-6132 6 exploits
CVSS 7.2 HIGH 2015-12-08FIX AVAILABLE
Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04Office OLE DLL Hijacking
CVE-2015-6133 5 exploits
CVSS 7.2 HIGH 2015-12-08FIX AVAILABLE
Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04Office OLE DLL Hijacking
CVE-2015-6100 1 exploit
CVSS 7.2 HIGH 2015-11-10FIX AVAILABLE
Microsoft Windows Kernel - Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)
CVE-2015-6101 1 exploit
CVSS 7.2 HIGH 2015-11-11
Microsoft Windows - Race Condition DestroySMWP Use-After-Free (MS15-115)
CVE-2015-2554 4 exploits
CVSS 7.2 HIGH 2015-10-13FIX AVAILABLE
Windows 10 - #Windows10 Desktop Bridge Activation Arbitrary Directory Creation Privilege EscalationMicrosoft Windows 10 - Desktop Bridge Activation Arbitrary Directory Creation Privilege Escalation
CVE-2015-2553 8 exploits
CVSS 7.2 HIGH 2015-10-13FIX AVAILABLE
Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (2) (MS16-008)Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)
CVE-2015-2552 1 exploit
CVSS 7.2 HIGH 2015-10-13FIX AVAILABLE
Microsoft Trusted Boot Security Feature Bypass
CVE-2015-2507 2 exploits
CVSS 7.2 HIGH 2015-09-08FIX AVAILABLE
Exploit for CVE-2015-2365Microsoft Windows Kernel - Use-After-Free with Printer Device Contexts (MS15-097)
CVE-2015-2512 3 exploits
CVSS 7.2 HIGH 2015-09-09FIX AVAILABLE
Windows 10 kernel buffer overflow in NtGdiBitBlt PoCMicrosoft Windows Kernel - 'NtGdiBitBlt' Buffer Overflow (MS15-097)
CVE-2015-2524 1 exploit
CVSS 7.2 HIGH 2015-09-08FIX AVAILABLE
Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation
CVE-2015-2525 2 exploits
CVSS 7.2 HIGH 2015-09-08FIX AVAILABLE
Microsoft Windows Task Scheduler - 'DeleteExpiredTaskAfter' File Deletion Privilege EscalationImmunity Canvas: MS15_102
CVE-2015-2527 1 exploit
CVSS 7.2 HIGH 2015-09-08FIX AVAILABLE
Microsoft Windows - NtUserGetClipboardAccessToken Token Leak (MS15-023)
CVE-2015-2528 1 exploit
CVSS 7.2 HIGH 2015-09-08FIX AVAILABLE
Microsoft Windows - CreateObjectTask TileUserBroker Privilege Escalation
CVE-2015-2370 4 exploits
CVSS 7.2 HIGH 2015-07-14FIX AVAILABLE
MS15-076 Windows: DCOM DCE/RPC Local NTLM Reflection Elevation of Privilege (CVE-2015-2370)Windows 8.1 - DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076) Exploit
CVE-2015-2366 2 exploits
CVSS 7.2 HIGH 2015-07-14FIX AVAILABLE
Exploit for CVE-2015-2365Microsoft Windows Kernel - 'DeferWindowPos' Use-After-Free (MS15-073)
CVE-2015-2365 2 exploits
CVSS 7.2 HIGH 2015-07-14FIX AVAILABLE
Exploit for CVE-2015-2365Microsoft Windows Kernel - 'UserCommitDesktopMemory' Use-After-Free (MS15-073)
CVE-2015-1727 1 exploit
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)
CVE-2015-1726 1 exploit
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - 'HmgAllocateObjectAttr' Use-After-Free (MS15-061)
CVE-2015-1725 2 exploits
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - 'win32k!vSolidFillRect' Buffer Overflow (MS15-061)Microsoft Windows Kernel - 'SURFOBJ' Null Pointer Dereference (MS15-061)
CVE-2015-1724 1 exploit
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - Brush Object Use-After-Free (MS15-061)
CVE-2015-1723 1 exploit
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - WindowStation Use-After-Free (MS15-061)
CVE-2015-1722 2 exploits
CVSS 7.2 HIGH 2015-06-09FIX AVAILABLE
Microsoft Windows Kernel - Bitmap Handling Use-After-Free (MS15-061) (2)Microsoft Windows Kernel - Bitmap Handling Use-After-Free (MS15-061) (1)