Windows Rt vulnerabilities

13 known vulnerabilities in Windows Rt from Microsoft. 12 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.9 Medium severity

  Microsoft Win32k Memory Corruption Exploited

  CVE-2015-2546Sep 9, 2015MicrosoftEPSS 10.1%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted appli

• 7.2 High severity

  Microsoft Windows Mount Manager Privilege Escalation Exploited

  CVE-2015-1769Aug 15, 2015MicrosoftEPSS 4.08%

  Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers t

• 9.3 High severity

  Microsoft Windows Adobe Type Manager Library Remote Code Execution Exploited

  CVE-2015-2426Jul 20, 2015MicrosoftEPSS 86.6%

  Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attack

• 7.8 High severity

  Microsoft ATM Font Driver Privilege Escalation Exploited

  CVE-2015-2387Jul 14, 2015MicrosoftEPSS 34.9%

  ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2015-2360Jun 10, 2015MicrosoftEPSS 14.8%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 7.8 High severity

  Microsoft Windows TS WebProxy Directory Traversal Exploited

  CVE-2015-0016Jan 13, 2015MicrosoftEPSS 75.8%

  Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attacker

• 9.3 High severity

  Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Exploited

  CVE-2014-6332Nov 11, 2014MicrosoftEPSS 94.9%

  OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary co

• 7.8 High severity

  Microsoft Windows Code Injection Exploited

  CVE-2014-6352Oct 22, 2014MicrosoftEPSS 77.5%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object, as exploited in the

• 8.8 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2014-4148Oct 15, 2014MicrosoftEPSS 59.9%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to ex

• 9.3 High severity

  Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Exploited

  CVE-2014-4114Oct 15, 2014MicrosoftEPSS 81.6%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2014-4113Oct 15, 2014MicrosoftEPSS 86.6%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain pr

• 8.8 High severity

  Microsoft Windows Out-of-Bounds Write Exploited

  CVE-2013-3918Nov 12, 2013MicrosoftEPSS 73.9%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, an

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2013-3660May 24, 2013MicrosoftEPSS 39.3%

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not proper