Microsoft Windows 8.1

Name: Microsoft Windows 8.1
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical318high468medium96low

updated 2026-10-27

vulnerabilities (1,087)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	6.3.9600.20046	2021-07-02	6.3.0 → 6.3.9600.20046
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	6.3.9600.20402	2022-06-01	6.3.0 → 6.3.9600.20402
CVE-2021-40444US	medium6.8OT critical	97.8% (100th)	KEV	6.3.9600.20120	2021-09-15	6.3.0 → 6.3.9600.20120
CVE-2018-8174US	high7.5OT critical	88.2% (100th)	KEV	no fix	2018-05-09	2 versions
CVE-2021-1675US	high9.3OT critical	85.3% (100th)	KEV	6.3.9600.20044	2021-06-08	2 versions
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	6.3.9600.20371	2022-05-10	6.3.0 → 6.3.9600.20371
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	6.3.9600.20144	2021-10-13	6.3.0 → 6.3.9600.20144
CVE-2018-8453US	high7.8OT critical	70.0% (99th)	KEV	no fix	2018-10-10	2 versions
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	6.3.9600.20269	2022-02-09	6.3.0 → 6.3.9600.20269
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	6.3.9600.20778	2023-01-10	6.3.0 → 6.3.9600.20778
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	6.3.9600.20571	2022-09-13	6.3.0 → 6.3.9600.20571
CVE-2021-31956US	high9.3OT critical	22.3% (98th)	KEV	6.3.9600.20045	2021-06-08	2 versions
CVE-2018-8639US	high7.8OT critical	22.2% (98th)	KEV	no fix	2018-12-12	2 versions
CVE-2018-8440US	high7.8OT critical	18.5% (97th)	KEV	no fix	2018-09-13	2 versions
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	6.3.9600.20269	2022-02-09	6.3.0 → 6.3.9600.20269
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	6.3.9600.20337	2022-04-15	6.3.0 → 6.3.9600.20337
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	6.3.9600.20337	2022-04-15	6.3.0 → 6.3.9600.20337
CVE-2020-17087US	high7.2OT critical	5.43% (93rd)	KEV	publication	2020-11-11	6.3.0 → publication
CVE-2018-8611US	high7.8OT critical	4.20% (91st)	KEV	no fix	2018-12-12	2 versions
CVE-2021-36955US	medium4.6OT critical	4.07% (91st)	KEV	6.3.9600.20120	2021-09-15	6.3.0 → 6.3.9600.20120
CVE-2021-43226US	high7.8OT critical	3.28% (88th)	KEV	6.3.9600.20207	2021-12-15	6.3.0 → 6.3.9600.20207
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	6.3.9600.20520	2022-08-09	6.3.0 → 6.3.9600.20520
CVE-2021-33742US	medium6.8OT critical	59.4% (99th)	KEV	6.3.9600.20045	2021-06-08	2 versions
CVE-2021-34448US	high9.3OT critical	40.1% (99th)	KEV	6.3.9600.20069	2021-07-16	6.3.0 → 6.3.9600.20069
CVE-2020-1464US	low2.1OT critical	38.9% (99th)	KEV	publication	2020-08-17	6.3.0 → publication
CVE-2022-41128US	—OT critical	24.6% (98th)	KEV	6.3.9600.20671	2022-11-09	6.3.0 → 6.3.9600.20671
CVE-2021-34484US	medium4.6OT critical	21.8% (98th)	KEV	6.3.9600.20094	2021-08-12	6.3.0 → 6.3.9600.20094
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	6.3.9600.20174	2021-11-10	6.3.0 → 6.3.9600.20174
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	6.3.9600.20478	2022-07-12	6.3.0 → 6.3.9600.20478
CVE-2022-38028US	—OT critical	14.9% (97th)	KEV	6.3.9600.20625	2022-10-11	6.3.0 → 6.3.9600.20625
CVE-2022-26925US	medium5.9OT critical	10.5% (96th)	KEV	6.3.9600.20371	2022-05-10	6.3.0 → 6.3.9600.20371
CVE-2021-33771US	high7.2OT critical	10.2% (96th)	KEV	6.3.9600.20069	2021-07-14	6.3.0 → 6.3.9600.20069
CVE-2021-31979US	high7.2OT critical	4.54% (92nd)	KEV	6.3.9600.20069	2021-07-14	6.3.0 → 6.3.9600.20069
CVE-2018-8405US	high7.8OT critical	3.44% (89th)	KEV	no fix	2018-08-15	2 versions
CVE-2022-41125US	—OT critical	3.05% (87th)	KEV	6.3.9600.20671	2022-11-09	6.3.0 → 6.3.9600.20671
CVE-2021-31199US	medium4.6OT critical	2.95% (87th)	KEV	6.3.9600.20045	2021-06-08	2 versions
CVE-2021-31201US	medium4.6OT critical	2.62% (85th)	KEV	6.3.9600.20044	2021-06-08	2 versions
CVE-2022-21919US	medium6.9OT critical	2.43% (84th)	KEV	6.3.9600.20246	2022-01-11	6.3.0 → 6.3.9600.20246
CVE-2022-41073US	—OT critical	2.36% (84th)	KEV	6.3.9600.20671	2022-11-09	6.3.0 → 6.3.9600.20671
CVE-2022-41033US	—OT critical	1.89% (79th)	KEV	6.3.9600.20625	2022-10-11	6.3.0 → 6.3.9600.20625
CVE-2022-26809US	high10.0	91.0% (100th)	Exploit	6.3.9600.20337	2022-04-15	6.3.0 → 6.3.9600.20337
CVE-2022-23270US	high9.3	70.3% (99th)	Exploit	6.3.9600.20371	2022-05-10	6.3.0 → 6.3.9600.20371
CVE-2021-24086US	medium5.0	59.0% (99th)	Exploit	publication	2021-02-25	6.3.0 → publication
CVE-2022-23253US	medium4.0	56.4% (99th)	Exploit	6.3.9600.20303	2022-03-09	6.3.0 → 6.3.9600.20303
CVE-2022-34718US	—	54.7% (99th)	Exploit	6.3.9600.20571	2022-09-13	6.3.0 → 6.3.9600.20571
CVE-2021-26414US	medium4.3	49.8% (99th)	Exploit	6.3.9600.20402	2021-06-08	6.3.0 → 6.3.9600.20402
CVE-2018-8420US	high8.8	48.9% (99th)	Exploit	no fix	2018-09-13	2 versions
CVE-2019-1040US	medium4.3	48.0% (99th)	Exploit	publication	2019-06-12	6.3.0 → publication
CVE-2021-34481US	high7.5	47.7% (99th)	Exploit	6.3.9600.20094	2021-07-16	6.3.0 → 6.3.9600.20094
CVE-2018-8544US	high8.8	47.6% (99th)	Exploit	no fix	2018-11-14	2 versions

showing 50 of 1,087

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-264233 CVEs
CWE-269Improper Privilege Management221 CVEs
CWE-20Improper Input Validation170 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor167 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer140 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')107 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')53 CVEs
CWE-404Improper Resource Shutdown or Release35 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)1,087 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan