# Vulnerabilities published in 2018 - [CVE-2018-8631](https://insights.sbomify.com/CVE-2018-8631/): Memory corruption in Internet Explorer 10 (high 7.5) - [CVE-2018-8629](https://insights.sbomify.com/CVE-2018-8629/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8628](https://insights.sbomify.com/CVE-2018-8628/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8627](https://insights.sbomify.com/CVE-2018-8627/): Information disclosure in Excel (medium 5.5) - [CVE-2018-8626](https://insights.sbomify.com/CVE-2018-8626/): Memory corruption in Windows 10 (critical 9.8) - [CVE-2018-8625](https://insights.sbomify.com/CVE-2018-8625/): Use after free in Internet Explorer 10 (high 7.5) - [CVE-2018-8624](https://insights.sbomify.com/CVE-2018-8624/): ChakraCore Remote code execution Vulnerability (high 7.5) - [CVE-2018-8622](https://insights.sbomify.com/CVE-2018-8622/): Information disclosure in Windows 7 (medium 5.5) - [CVE-2018-8621](https://insights.sbomify.com/CVE-2018-8621/): Information disclosure in Windows 7 (medium 5.5) - [CVE-2018-8619](https://insights.sbomify.com/CVE-2018-8619/): Code injection in Internet Explorer 10 (high 7.5) - [CVE-2018-8618](https://insights.sbomify.com/CVE-2018-8618/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8617](https://insights.sbomify.com/CVE-2018-8617/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8612](https://insights.sbomify.com/CVE-2018-8612/): Denial of service in Windows 10 (medium 5.5) - [CVE-2018-8611](https://insights.sbomify.com/CVE-2018-8611/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2018-8609](https://insights.sbomify.com/CVE-2018-8609/): Code injection in Microsoft Dynamics 365 (high 8.8) - [CVE-2018-8608](https://insights.sbomify.com/CVE-2018-8608/): Cross-site scripting in Microsoft Dynamics 365 (medium 5.4) - [CVE-2018-8607](https://insights.sbomify.com/CVE-2018-8607/): Cross-site scripting in Microsoft Dynamics 365 (medium 5.4) - [CVE-2018-8606](https://insights.sbomify.com/CVE-2018-8606/): Cross-site scripting in Microsoft Dynamics 365 (medium 5.4) - [CVE-2018-8605](https://insights.sbomify.com/CVE-2018-8605/): Cross-site scripting in n/a (medium 5.4) - [CVE-2018-8604](https://insights.sbomify.com/CVE-2018-8604/): A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tamper (medium 4.3) - [CVE-2018-8602](https://insights.sbomify.com/CVE-2018-8602/): Cross-site scripting in Team (medium 5.4) - [CVE-2018-8600](https://insights.sbomify.com/CVE-2018-8600/): Cross-site scripting in Azure App (medium 6.1) - [CVE-2018-8599](https://insights.sbomify.com/CVE-2018-8599/): Privilege escalation in Microsoft Visual Studio (high 7.8) - [CVE-2018-8598](https://insights.sbomify.com/CVE-2018-8598/): Information disclosure in Microsoft Excel (medium 4.7) - [CVE-2018-8597](https://insights.sbomify.com/CVE-2018-8597/): Memory corruption in Microsoft Excel (high 7.8) - [CVE-2018-8596](https://insights.sbomify.com/CVE-2018-8596/): Information disclosure in Windows 10 (medium 6.5) - [CVE-2018-8595](https://insights.sbomify.com/CVE-2018-8595/): Information disclosure in Windows 10 (medium 6.5) - [CVE-2018-8592](https://insights.sbomify.com/CVE-2018-8592/): Privilege escalation in Windows 10 (medium 6.4) - [CVE-2018-8589](https://insights.sbomify.com/CVE-2018-8589/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild) - [CVE-2018-8588](https://insights.sbomify.com/CVE-2018-8588/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8587](https://insights.sbomify.com/CVE-2018-8587/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8584](https://insights.sbomify.com/CVE-2018-8584/): Race condition in Windows 10 (high 7.8) - [CVE-2018-8583](https://insights.sbomify.com/CVE-2018-8583/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8582](https://insights.sbomify.com/CVE-2018-8582/): Code injection in Microsoft Office (high 8.8) - [CVE-2018-8581](https://insights.sbomify.com/CVE-2018-8581/): Microsoft Exchange Server Privilege Escalation (high 7.4, exploited in the wild) - [CVE-2018-8580](https://insights.sbomify.com/CVE-2018-8580/): Information disclosure in Microsoft SharePoint (medium 4.3) - [CVE-2018-8579](https://insights.sbomify.com/CVE-2018-8579/): Information disclosure in Microsoft Office (medium 6.5) - [CVE-2018-8578](https://insights.sbomify.com/CVE-2018-8578/): Information disclosure in Microsoft SharePoint (medium 4.3) - [CVE-2018-8577](https://insights.sbomify.com/CVE-2018-8577/): Memory corruption in Excel (high 7.8) - [CVE-2018-8576](https://insights.sbomify.com/CVE-2018-8576/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8575](https://insights.sbomify.com/CVE-2018-8575/): Memory corruption in Microsoft Project (high 7.8) - [CVE-2018-8574](https://insights.sbomify.com/CVE-2018-8574/): Memory corruption in Microsoft Excel (high 7.8) - [CVE-2018-8573](https://insights.sbomify.com/CVE-2018-8573/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8572](https://insights.sbomify.com/CVE-2018-8572/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8570](https://insights.sbomify.com/CVE-2018-8570/): Memory corruption in Internet Explorer 11 (high 7.5) - [CVE-2018-8569](https://insights.sbomify.com/CVE-2018-8569/): Code injection in Yammer Desktop App (high 7.8) - [CVE-2018-8568](https://insights.sbomify.com/CVE-2018-8568/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8567](https://insights.sbomify.com/CVE-2018-8567/): Security feature bypass in Microsoft Edge (medium 5.4) - [CVE-2018-8566](https://insights.sbomify.com/CVE-2018-8566/): Security feature bypass in Windows 10 (medium 4.6) - [CVE-2018-8565](https://insights.sbomify.com/CVE-2018-8565/): Information disclosure in Windows 10 (medium 5.5) - [CVE-2018-8564](https://insights.sbomify.com/CVE-2018-8564/): Cross-site scripting in Microsoft Edge (medium 4.3) - [CVE-2018-8563](https://insights.sbomify.com/CVE-2018-8563/): Information disclosure in Windows 7 (medium 5.5) - [CVE-2018-8562](https://insights.sbomify.com/CVE-2018-8562/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8561](https://insights.sbomify.com/CVE-2018-8561/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8558](https://insights.sbomify.com/CVE-2018-8558/): Information disclosure in Microsoft Office (medium 6.5) - [CVE-2018-8557](https://insights.sbomify.com/CVE-2018-8557/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8556](https://insights.sbomify.com/CVE-2018-8556/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8555](https://insights.sbomify.com/CVE-2018-8555/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8554](https://insights.sbomify.com/CVE-2018-8554/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8553](https://insights.sbomify.com/CVE-2018-8553/): Memory corruption in Windows 10 (high 7.8) - [CVE-2018-8552](https://insights.sbomify.com/CVE-2018-8552/): Information disclosure in Internet Explorer 10 (high 7.5) - [CVE-2018-8551](https://insights.sbomify.com/CVE-2018-8551/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8550](https://insights.sbomify.com/CVE-2018-8550/): Privilege escalation in n/a (high 7.8) - [CVE-2018-8549](https://insights.sbomify.com/CVE-2018-8549/): Security feature bypass in n/a (medium 5.5) - [CVE-2018-8547](https://insights.sbomify.com/CVE-2018-8547/): Cross-site scripting in Windows 10 (medium 5.4) - [CVE-2018-8546](https://insights.sbomify.com/CVE-2018-8546/): Denial of service in Microsoft Lync (medium 5.9) - [CVE-2018-8545](https://insights.sbomify.com/CVE-2018-8545/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2018-8544](https://insights.sbomify.com/CVE-2018-8544/): Use after free in Windows 10 (high 8.8) - [CVE-2018-8543](https://insights.sbomify.com/CVE-2018-8543/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8542](https://insights.sbomify.com/CVE-2018-8542/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8541](https://insights.sbomify.com/CVE-2018-8541/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8540](https://insights.sbomify.com/CVE-2018-8540/): Code injection in Microsoft .NET Framework (critical 9.8) - [CVE-2018-8539](https://insights.sbomify.com/CVE-2018-8539/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8533](https://insights.sbomify.com/CVE-2018-8533/): XML external entity in SQL Server Management Studio 17.9 (medium 5.5) - [CVE-2018-8532](https://insights.sbomify.com/CVE-2018-8532/): XML external entity in SQL Server Management Studio 17.9 (medium 5.5) - [CVE-2018-8531](https://insights.sbomify.com/CVE-2018-8531/): Memory corruption in Azure IoT Edge (high 8.8) - [CVE-2018-8530](https://insights.sbomify.com/CVE-2018-8530/): Security feature bypass in Microsoft Edge (medium 4.3) - [CVE-2018-8529](https://insights.sbomify.com/CVE-2018-8529/): Missing authorization in Team (critical 9.8) - [CVE-2018-8527](https://insights.sbomify.com/CVE-2018-8527/): XML external entity in SQL Server Management Studio 17.9 (medium 5.5) - [CVE-2018-8524](https://insights.sbomify.com/CVE-2018-8524/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8522](https://insights.sbomify.com/CVE-2018-8522/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8518](https://insights.sbomify.com/CVE-2018-8518/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8517](https://insights.sbomify.com/CVE-2018-8517/): Denial of service in Microsoft .NET Framework (high 7.5) - [CVE-2018-8514](https://insights.sbomify.com/CVE-2018-8514/): Information disclosure in Windows 10 (medium 5.5) - [CVE-2018-8513](https://insights.sbomify.com/CVE-2018-8513/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8512](https://insights.sbomify.com/CVE-2018-8512/): Security feature bypass in Microsoft Edge (medium 5.4) - [CVE-2018-8511](https://insights.sbomify.com/CVE-2018-8511/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8510](https://insights.sbomify.com/CVE-2018-8510/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8509](https://insights.sbomify.com/CVE-2018-8509/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-8506](https://insights.sbomify.com/CVE-2018-8506/): Information disclosure in Windows 10 (medium 5.5) - [CVE-2018-8505](https://insights.sbomify.com/CVE-2018-8505/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8504](https://insights.sbomify.com/CVE-2018-8504/): Code injection in Microsoft Office (high 8.8) - [CVE-2018-8503](https://insights.sbomify.com/CVE-2018-8503/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8502](https://insights.sbomify.com/CVE-2018-8502/): Code injection in Microsoft Excel (high 8.8) - [CVE-2018-8501](https://insights.sbomify.com/CVE-2018-8501/): Code injection in Microsoft Office (high 8.8) - [CVE-2018-8500](https://insights.sbomify.com/CVE-2018-8500/): ChakraCore RCE Vulnerability (critical 9.8) - [CVE-2018-8498](https://insights.sbomify.com/CVE-2018-8498/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8497](https://insights.sbomify.com/CVE-2018-8497/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8495](https://insights.sbomify.com/CVE-2018-8495/): Path traversal in Windows 10 (high 7.5) - [CVE-2018-8494](https://insights.sbomify.com/CVE-2018-8494/): XML external entity in Windows 10 (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/10/