GCVE - cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_8:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows 8 (`32f9dbbd-63cc-598c-ad8a-46889c43b9fa`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-7250`	vulnerable	2026-06-08 05:12:03.519982	Details available An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data. Published: 2018-02-26T20:00:00.000Z Updated: 2024-08-05T06:24:11.736Z Open on db.gcve.eu Reference links https://github.com/Elvin9/SecDrvPoolLeak/blob/master/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-7249`	vulnerable	2026-06-08 05:12:03.516818	Details available An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race condition that leads to a use-after-free. When exploited, an unprivileged attacker can run arbitrary code in the kernel. Published: 2018-02-26T20:00:00.000Z Updated: 2024-08-05T06:24:11.246Z Open on db.gcve.eu Reference links https://github.com/Elvin9/NotSecDrv/blob/master/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6947`	vulnerable	2026-06-08 05:11:54.489701	Details available An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10. Published: 2018-02-28T22:00:00.000Z Updated: 2024-08-05T06:17:17.261Z Open on db.gcve.eu Reference links https://www.fidusinfosec.com/nomachine-road-code-execution-without-fuzzing-cve-2018-6947/ https://www.exploit-db.com/exploits/44168/ https://www.nomachine.com/SU02P00194 https://www.exploit-db.com/exploits/44167/ https://www.nomachine.com/SU02P00195	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14010`	not_vulnerable	2026-06-08 05:08:49.044628	Details available In SpiderControl MicroBrowser Windows XP, Vista 7, 8 and 10, Versions 1.6.30.144 and prior, an uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path. If the malicious DLL is loaded prior to the valid DLL, an attacker could execute arbitrary code on the system. Published: 2018-04-26T19:00:00.000Z Updated: 2024-09-16T21:04:09.236Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-17-292-01 http://spidercontrol.net/download/downloadarea/?lang=en http://www.securityfocus.com/bid/101505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0050`	vulnerable	2026-06-08 05:08:25.327274	Details available The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability." Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:17.299Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96025 http://www.securitytracker.com/id/1038013 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0050	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0959`	not_vulnerable	2026-06-08 05:07:16.695220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1824`	vulnerable	2026-06-08 05:05:26.377117	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1767`	vulnerable	2026-06-08 05:05:26.312131	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7332`	vulnerable	2026-06-08 05:05:09.798489	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.