Windows 10 Servers vulnerabilities

8 known vulnerabilities in Windows 10 Servers from Microsoft. 8 are rated high or critical, and 8 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Win32k Improper Resource Shutdown or Release Exploited

  CVE-2018-8639Dec 12, 2018MicrosoftEPSS 22.3%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2018-8611Dec 12, 2018MicrosoftEPSS 4.2%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, W

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2018-8453Oct 10, 2018MicrosoftEPSS 70%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 20

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2018-8440Sep 13, 2018MicrosoftEPSS 18.5%

  An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Serve

• 8.8 High severity

  Microsoft Windows Shell Remote Code Execution Exploited

  CVE-2018-8414Aug 15, 2018MicrosoftEPSS 72.6%

  A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.

• 7.8 High severity

  Microsoft DirectX Graphics Kernel Privilege Escalation Exploited

  CVE-2018-8406Aug 15, 2018MicrosoftEPSS 3.44%

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10

• 7.8 High severity

  Microsoft DirectX Graphics Kernel Privilege Escalation Exploited

  CVE-2018-8405Aug 15, 2018MicrosoftEPSS 3.44%

  An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Wind

• 7.5 High severity

  Microsoft Windows VBScript Engine Out-of-Bounds Write Exploited

  CVE-2018-8174May 9, 2018MicrosoftEPSS 88.2%

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,