Sploitus

78 exploited vulnerabilities in Windows Rt 8.1

Showing 1–50 of 78, highest-scoring first

Vendors
Microsoft, Adobe, Suse
With known exploits
78
Affected Microsoft Windows 10 1507 versions
All versions
Affected Microsoft Windows 10 1511 versions
All versions
Affected Microsoft Windows 10 1607 versions
All versions
Affected Microsoft Windows 10 1703 versions
All versions
Affected Microsoft Windows 7 versions
All versions
Affected Microsoft Windows 8.1 versions
All versions
Affected Microsoft Windows Rt 8.1 versions
All versions
Affected Microsoft Windows Server 2008 versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 47 of these already have exploit code on Sploitus

CVE-2017-8543
CVSS 10.0 CRITICAL 2017-06-13FIX AVAILABLE
CVE-2016-7182 1 exploit
CVSS 10.0 CRITICAL 2016-10-11FIX AVAILABLE
Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)
CVE-2016-3236 2 exploits
CVSS 10.0 CRITICAL 2016-06-14
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2018-8423 1 exploit
CVSS 9.3 HIGH 2018-05-08FIX AVAILABLE
SRC-2018-0029 : Microsoft Windows Jet Database Engine Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2018-8413 3 exploits
CVSS 9.3 HIGH 2018-10-09
Microsoft Windows 10 - Theme API (ThemePack) File Parsing ExploitMicrosoft Windows 10 - Theme API ThemePack File Parsing
CVE-2018-8544 3 exploits
CVSS 9.3 HIGH 2018-11-13FIX AVAILABLE
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-FreeVBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free
CVE-2018-8420 1 exploit
CVSS 9.3 HIGH 2018-09-11FIX AVAILABLE
Exploit for CVE-2014-4878
CVE-2017-8558 2 exploits
CVSS 9.3 HIGH 2017-06-29
Microsoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API ExploitMicrosoft MsMpEng - mpengine x86 Emulator Heap Corruption in VFS API
CVE-2017-0290 5 exploits
CVSS 9.3 HIGH 2017-05-08
📄 Microsoft Malware Protection Engine Type ConfusionMicrosoft Malware Protection Engine RCE (CVE-2017-0290)
CVE-2017-11779 1 exploit
CVSS 9.3 HIGH 2017-10-10
Windows KEPT remote code execution vulnerability analysis(CVE-2017-11779)
CVE-2017-8682 2 exploits
CVSS 9.3 HIGH 2017-09-12FIX AVAILABLE
Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with MalformeMicrosoft Windows Kernel - 'win32k.sys' '.TTF' Font Processing Out-of-Bounds Reads/Writes with Malformed 'fpgm' table 'win32k!bGeneratePath' (Denial of Service)
CVE-2017-0283 3 exploits
CVSS 9.3 HIGH 2017-06-13
Microsoft Windows - USP10!MergeLigRecords Uniscribe Font Processing Heap-Based Memory CorruptionMicrosoft Windows Uniscribe Remote Code Execution Vulnerability(CVE-2017-0283)
CVE-2017-8464 20 exploits
CVSS 9.3 HIGH 2017-06-13
Exploit for CVE-2017-0213Exploit for CVE-2017-0213
CVE-2016-3237 4 exploits
CVSS 9.3 HIGH 2016-08-09FIX AVAILABLE
Kerberos Security Feature BypassKerberos in Microsoft Windows - Security Feature Bypass (MS16-101)
CVE-2016-3213 2 exploits
CVSS 9.3 HIGH 2016-06-14FIX AVAILABLE
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2016-3223 4 exploits
CVSS 9.3 HIGH 2016-06-14
Microsoft Windows 7 (x32/x64) - Group Policy Privilege Escalation (MS16-072)Microsoft Windows 7 (x86x64) - Group Policy Privilege Escalation (MS16-072)
CVE-2016-0170 2 exploits
CVSS 9.3 HIGH 2016-05-10FIX AVAILABLE
Microsoft Windows - gdi32.dll Heap Based Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPMicrosoft Windows - 'gdi32.dll' Heap Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPE EMF Record (MS16-055)
CVE-2016-0145 2 exploits
CVSS 9.3 HIGH 2016-04-12FIX AVAILABLE
Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)
CVE-2016-0121 2 exploits
CVSS 9.3 HIGH 2016-03-08FIX AVAILABLE
Microsoft Windows - Kernel ATMFD.dll OTF Font Processing Pool-Based Buffer Overflow (MS16-026)Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
CVE-2015-2459 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access ExploitMicrosoft Windows - 'ATMFD.DLL' CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
CVE-2019-0552 2 exploits
CVSS 8.8 HIGH 2019-01-08FIX AVAILABLE
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation ExploitMicrosoft Windows 10 - COM Desktop Broker Privilege Escalation
CVE-2018-0824 5 exploits
CVSS 8.8 HIGH 2018-05-08
Windows unmarshal post exploitationImmunity Canvas: UNMARSHAL_TO_SYSTEM
CVE-2018-8639
CVSS 8.4 HIGH 2018-12-11FIX AVAILABLE
CVE-2019-0570 2 exploits
CVSS 7.8 HIGH 2019-01-08FIX AVAILABLE
Microsoft Windows 10 - RestrictedErrorInfo Unmarshal Section Handle Use-After-Free ExploitMicrosoft Windows 10 - 'RestrictedErrorInfo' Unmarshal Section Handle Use-After-Free
CVE-2019-0555 2 exploits
CVSS 7.8 HIGH 2019-01-08FIX AVAILABLE
Microsoft Windows 10 - XmlDocument Insecure Sharing Privilege Escalation ExploitMicrosoft Windows 10 - XmlDocument Insecure Sharing Privilege Escalation
CVE-2019-0543 2 exploits
CVSS 7.8 HIGH 2019-01-08FIX AVAILABLE
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation ExploitMicrosoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation
CVE-2018-8550 3 exploits
CVSS 7.8 HIGH 2018-11-13FIX AVAILABLE
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation ExploitMicrosoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
CVE-2018-0748 2 exploits
CVSS 7.8 HIGH 2018-01-03
Microsoft Windows - NTFS Owner/Mandatory Label Privilege Bypass ExploitMicrosoft Windows - NTFS Owner/Mandatory Label Privilege Bypass
CVE-2018-0749 2 exploits
CVSS 7.8 HIGH 2018-01-03FIX AVAILABLE
Microsoft Windows SMB Server (v1 and v2) - Mount Point Arbitrary Device Open Privilege Escalation ExMicrosoft Windows SMB Server (v1/v2) - Mount Point Arbitrary Device Open Privilege Escalation
CVE-2018-8411 2 exploits
CVSS 7.8 HIGH 2018-10-09FIX AVAILABLE
Microsoft Windows - FSCTL_FIND_FILES_BY_SID Information Disclosure ExploitMicrosoft Windows - 'FSCTL_FIND_FILES_BY_SID' Information Disclosure
CVE-2018-8611
CVSS 7.8 HIGH 2018-11-12
CVE-2018-8453 8 exploits
CVSS 7.8 HIGH 2018-08-17FIX AVAILABLE
Exploit for CVE-2018-8453Microsoft Windows NtUserSetWindowFNID Win32k User Callback Exploit
CVE-2018-8410 2 exploits
CVSS 7.8 HIGH 2018-09-11FIX AVAILABLE
Microsoft Windows - Double Dereference in NtEnumerateKey Elevation of Privilege ExploitMicrosoft Windows - Double Dereference in NtEnumerateKey Elevation of Privilege
CVE-2018-8440 6 exploits
CVSS 7.8 HIGH 2018-08-27FIX AVAILABLE
Exploit for Code Injection in MicrosoftExploit for Code Injection in Microsoft
CVE-2017-0263 3 exploits
CVSS 7.8 HIGH 2017-05-07FIX AVAILABLE
Microsoft Window Manager (Windows 7 x86) - Menu Management Component UAF Privilege Elevation ExploitMicrosoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation
CVE-2017-0165 3 exploits
CVSS 7.8 HIGH 2017-04-11FIX AVAILABLE
Microsoft Windows 10 (Build 10586) - IEETWCollector Arbitrary Directory/File Deletion Privilege EscaMicrosoft Windows 10 10586 - IEETWCollector Arbitrary Directory/File Deletion Privilege Escalation E
CVE-2016-7255 24 exploits
CVSS 7.8 HIGH 2016-11-08FIX AVAILABLE
Win32k ConsoleControl Offset Confusion / Privilege EscalationWin32k ConsoleControl Offset Confusion / Privilege Escalation Exploit
CVE-2016-3220 2 exploits
CVSS 7.8 HIGH 2016-06-14
Microsoft Windows - Kernel ATMFD.dll NamedEscape 0x250C Pool Corruption (MS16-074)Microsoft Windows Kernel - 'ATMFD.dll' NamedEscape 0x250C Pool Corruption (MS16-074)
CVE-2016-3225 7 exploits
CVSS 7.8 HIGH 2016-06-14FIX AVAILABLE
Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege EscalationWindows Net-NTLMv2 Reflection DCOM/RPC (Juicy)
CVE-2016-0151 2 exploits
CVSS 7.8 HIGH 2016-04-12
Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)Microsoft Windows - CSRSS BaseSrvCheckVDM Session 0 Process Creation Privilege Escalation (MS16-048)
CVE-2016-0099 16 exploits
CVSS 7.8 HIGH 2016-03-08
MS16-032-Cobalt-Strike-LPE-BOFExploit for Code Injection in Microsoft
CVE-2016-0041 4 exploits
CVSS 7.8 HIGH 2016-02-09FIX AVAILABLE
Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-04Office OLE DLL Hijacking
CVE-2016-0051 12 exploits
CVSS 7.8 HIGH 2016-02-09FIX AVAILABLE
Microsoft Windows 7 SP1 - mrxdav.sys WebDav Privilege Escalation (MS16-016)Microsoft Windows 7 SP1 - 'mrxdav.sys' WebDAV Privilege Escalation (MS16-016) (Metasploit)
CVE-2018-0886 3 exploits
CVSS 7.6 HIGH 2018-03-13FIX AVAILABLE
Microsoft Credential Security Support Provider - Remote Code Execution VulnerabilityMicrosoft Credential Security Support Provider - Remote Code Execution
CVE-2017-11855 4 exploits
CVSS 7.6 HIGH 2017-11-14
Windows: Uninitialized variable in jscript!JsArraySlice(CVE-2017-11855)Microsoft Windows jscript!JsArraySlice Uninitialized Variable Exploit
CVE-2017-8594 3 exploits
CVSS 7.6 HIGH 2017-07-11
Microsoft Internet Explorer 11.0.9600.18617 - CMarkup::DestroySplayTree Memory Corruption ExploitMicrosoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption
CVE-2017-0147 25 exploits
CVSS 7.5 HIGH 2017-03-14FIX AVAILABLE
Exploit for CVE-2017-0143MS17-010 SMB Remote Code Execution Detection
CVE-2017-0213 13 exploits
CVSS 7.3 HIGH 2017-05-09FIX AVAILABLE
Exploit for Code Injection in MicrosoftExploit for Code Injection in Microsoft
CVE-2015-0058 1 exploit
CVSS 7.2 HIGH 2015-02-10FIX AVAILABLE
Microsoft Windows - Local Privilege Escalation (MS15-010)
CVE-2015-2554 4 exploits
CVSS 7.2 HIGH 2015-10-13FIX AVAILABLE
Windows 10 - #Windows10 Desktop Bridge Activation Arbitrary Directory Creation Privilege EscalationMicrosoft Windows 10 - Desktop Bridge Activation Arbitrary Directory Creation Privilege Escalation