Microsoft Corporation Microsoft Windows

Name: Microsoft Corporation Microsoft Windows
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical15high47medium0low

updated 2026-10-27

vulnerabilities (63)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-8543US	critical9.8OT critical	74.4% (99th)	KEV	no fix	2017-06-15	≤ Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0263US	high7.8OT critical	10.0% (96th)	KEV	no fix	2017-05-12	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8487US	high7.8	52.1% (99th)	Exploit	no fix	2017-06-15	≤ Windows XP SP3, Windows XP x64 SP2, Windows Server 2003 SP2
CVE-2017-11885US	medium6.6	45.5% (99th)	Exploit	no fix	2017-12-12	≤ Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709
CVE-2017-8461US	high7.8	20.4% (97th)	Exploit	no fix	2017-06-15	≤ Windows XP SP3, Windows XP x64 SP2, Windows Server 2003 SP2
CVE-2017-0259US	medium4.7	9.66% (95th)	Exploit	no fix	2017-05-12	≤ Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-0245US	medium4.7	7.70% (95th)	Exploit	no fix	2017-05-12	≤ Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold
CVE-2017-0220US	medium4.7	7.46% (94th)	Exploit	no fix	2017-05-12	≤ Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold
CVE-2017-0258US	medium4.7	7.36% (94th)	Exploit	no fix	2017-05-12	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-0175US	medium4.7	7.05% (94th)	Exploit	no fix	2017-05-12	≤ Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1
CVE-2017-8483US	medium5.0	5.11% (92nd)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8477US	medium5.0	5.11% (92nd)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0300US	medium5.0	4.96% (92nd)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8490US	medium5.0	4.87% (92nd)	Exploit	no fix	2017-06-15	≤ The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-0299US	medium5.0	4.79% (92nd)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8491US	medium5.0	3.90% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8489US	medium5.0	3.90% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8481US	medium5.0	3.90% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8479US	medium5.0	3.90% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8469US	medium5.5	3.72% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8492US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8488US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8484US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-8482US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8478US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8462US	medium5.0	3.71% (90th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8485US	medium5.0	3.59% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8473US	medium5.0	3.59% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 2016.
CVE-2017-8471US	medium5.0	3.59% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-8480US	medium5.0	3.42% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8476US	medium5.0	3.42% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8472US	medium5.0	3.42% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012.
CVE-2017-8470US	medium5.0	3.42% (89th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-8465US	high7.8	2.34% (84th)	Exploit	no fix	2017-06-15	≤ Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0190US	medium4.4	43.5% (99th)	—	no fix	2017-05-12	≤ Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and Windows Server 2016
CVE-2017-0215US	medium5.3	36.0% (98th)	—	no fix	2017-06-15	≤ Microsoft Windows 10 1607 and Windows Server 2016.
CVE-2017-0294US	high7.8	17.4% (97th)	—	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-11927US	medium6.5	9.62% (95th)	—	no fix	2017-12-12	≤ Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709
CVE-2017-0242US	medium5.5	7.94% (95th)	—	no fix	2017-05-12	≤ Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for x64-based Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation), Windows Server 2008 for Itanium-Based Systems Service Pack 2, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1.
CVE-2017-8474US	medium5.0	4.13% (91st)	—	no fix	2017-06-15	≤ Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8633US	high7.5OT elevated	3.89% (90th)	—	no fix	2017-08-08	≤ Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-0297US	medium5.0	3.73% (90th)	—	no fix	2017-06-15	≤ Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
CVE-2017-8475US	medium5.0	3.73% (90th)	—	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-8575US	medium5.5	3.30% (88th)	—	no fix	2017-06-29	≤ Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-8544US	medium5.5	3.25% (88th)	—	no fix	2017-06-15	≤ Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0174US	medium6.5	2.58% (85th)	—	no fix	2017-08-08	≤ Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
CVE-2017-0244US	medium6.7	2.00% (81st)	—	no fix	2017-05-12	≤ Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1
CVE-2017-8494US	high7.3	1.95% (80th)	—	no fix	2017-06-15	≤ Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-8515US	medium5.5	1.82% (79th)	—	no fix	2017-06-15	≤ Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016.
CVE-2017-0218US	medium5.3	1.70% (77th)	—	no fix	2017-06-15	≤ Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016.

showing 50 of 63

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor36 CVEs
CWE-281Improper Preservation of Permissions7 CVEs
CWE-264CWE-2646 CVEs
CWE-269Improper Privilege Management6 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-17CWE-171 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)63 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan