# Vulnerabilities published in 2018


- [CVE-2018-8384](https://insights.sbomify.com/CVE-2018-8384/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8383](https://insights.sbomify.com/CVE-2018-8383/): Other in Microsoft Edge (medium 4.3)
- [CVE-2018-8382](https://insights.sbomify.com/CVE-2018-8382/): Information disclosure in Microsoft Excel (medium 5.5)
- [CVE-2018-8381](https://insights.sbomify.com/CVE-2018-8381/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8380](https://insights.sbomify.com/CVE-2018-8380/): ChakraCore remote code execution vulnerability (high 7.5)
- [CVE-2018-8379](https://insights.sbomify.com/CVE-2018-8379/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-8378](https://insights.sbomify.com/CVE-2018-8378/): Information disclosure in Microsoft Excel Viewer (medium 5.5)
- [CVE-2018-8377](https://insights.sbomify.com/CVE-2018-8377/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8376](https://insights.sbomify.com/CVE-2018-8376/): Memory corruption in Microsoft PowerPoint (high 8.8)
- [CVE-2018-8375](https://insights.sbomify.com/CVE-2018-8375/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-8374](https://insights.sbomify.com/CVE-2018-8374/): A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tamper (medium 4.3)
- [CVE-2018-8373](https://insights.sbomify.com/CVE-2018-8373/): Microsoft Scripting Engine Memory Corruption (high 7.5, exploited in the wild)
- [CVE-2018-8372](https://insights.sbomify.com/CVE-2018-8372/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8371](https://insights.sbomify.com/CVE-2018-8371/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8370](https://insights.sbomify.com/CVE-2018-8370/): Information disclosure in Microsoft Edge (low 3.1)
- [CVE-2018-8367](https://insights.sbomify.com/CVE-2018-8367/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8366](https://insights.sbomify.com/CVE-2018-8366/): Information disclosure in Microsoft Edge (low 3.1)
- [CVE-2018-8360](https://insights.sbomify.com/CVE-2018-8360/): Information disclosure in Microsoft .NET Framework (high 7.5)
- [CVE-2018-8359](https://insights.sbomify.com/CVE-2018-8359/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8358](https://insights.sbomify.com/CVE-2018-8358/): Security feature bypass in Microsoft Edge (medium 4.3)
- [CVE-2018-8357](https://insights.sbomify.com/CVE-2018-8357/): Privilege escalation in Internet Explorer 11 (high 8.3)
- [CVE-2018-8356](https://insights.sbomify.com/CVE-2018-8356/): Improper Certificate Validation in Microsoft .NET Framework components (medium 5.5)
- [CVE-2018-8355](https://insights.sbomify.com/CVE-2018-8355/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8354](https://insights.sbomify.com/CVE-2018-8354/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8353](https://insights.sbomify.com/CVE-2018-8353/): Use after free in n/a (high 7.5)
- [CVE-2018-8351](https://insights.sbomify.com/CVE-2018-8351/): Information disclosure in Internet Explorer 10 (medium 6.5)
- [CVE-2018-8350](https://insights.sbomify.com/CVE-2018-8350/): Memory corruption in Windows 10 (high 8.8)
- [CVE-2018-8349](https://insights.sbomify.com/CVE-2018-8349/): Deserialization in Windows 10 (high 8.8)
- [CVE-2018-8348](https://insights.sbomify.com/CVE-2018-8348/): Information disclosure in Windows 10 (medium 4.7)
- [CVE-2018-8347](https://insights.sbomify.com/CVE-2018-8347/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-8346](https://insights.sbomify.com/CVE-2018-8346/): Code injection in Windows 7 (high 8.8)
- [CVE-2018-8345](https://insights.sbomify.com/CVE-2018-8345/): Code injection in Windows 10 (high 7.5)
- [CVE-2018-8344](https://insights.sbomify.com/CVE-2018-8344/): Code injection in Windows 10 (high 8.8)
- [CVE-2018-8343](https://insights.sbomify.com/CVE-2018-8343/): Memory corruption in Windows 10 (high 7.8)
- [CVE-2018-8342](https://insights.sbomify.com/CVE-2018-8342/): Memory corruption in Windows 7 (high 7.8)
- [CVE-2018-8341](https://insights.sbomify.com/CVE-2018-8341/): Information disclosure in Windows 10 (medium 4.7)
- [CVE-2018-8340](https://insights.sbomify.com/CVE-2018-8340/): Security feature bypass in Windows 10 Servers (medium 6.5)
- [CVE-2018-8339](https://insights.sbomify.com/CVE-2018-8339/): Privilege escalation in Windows 10 (high 7.0)
- [CVE-2018-8337](https://insights.sbomify.com/CVE-2018-8337/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-8336](https://insights.sbomify.com/CVE-2018-8336/): Information disclosure in Windows 7 (medium 5.5)
- [CVE-2018-8335](https://insights.sbomify.com/CVE-2018-8335/): Denial of service in Windows 10 (high 7.5)
- [CVE-2018-8333](https://insights.sbomify.com/CVE-2018-8333/): Privilege escalation in Windows 10 (high 7.0)
- [CVE-2018-8332](https://insights.sbomify.com/CVE-2018-8332/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-8331](https://insights.sbomify.com/CVE-2018-8331/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2018-8330](https://insights.sbomify.com/CVE-2018-8330/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-8329](https://insights.sbomify.com/CVE-2018-8329/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-8327](https://insights.sbomify.com/CVE-2018-8327/): Code injection in PowerShell Editor (critical 9.8)
- [CVE-2018-8326](https://insights.sbomify.com/CVE-2018-8326/): Cross-site scripting in Web Customizations (medium 5.4)
- [CVE-2018-8325](https://insights.sbomify.com/CVE-2018-8325/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-8324](https://insights.sbomify.com/CVE-2018-8324/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-8323](https://insights.sbomify.com/CVE-2018-8323/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-8320](https://insights.sbomify.com/CVE-2018-8320/): Security feature bypass in Windows 10 (medium 4.3)
- [CVE-2018-8319](https://insights.sbomify.com/CVE-2018-8319/): Sensitive Data Exposure in msrcrypto (critical 9.8)
- [CVE-2018-8316](https://insights.sbomify.com/CVE-2018-8316/): Code injection in Internet Explorer 10 (high 7.5)
- [CVE-2018-8315](https://insights.sbomify.com/CVE-2018-8315/): ChakraCore information disclosure vulnerability (medium 4.2)
- [CVE-2018-8314](https://insights.sbomify.com/CVE-2018-8314/): Privilege escalation in Windows 10 (medium 4.7)
- [CVE-2018-8313](https://insights.sbomify.com/CVE-2018-8313/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-8312](https://insights.sbomify.com/CVE-2018-8312/): Memory corruption in Microsoft Access (high 7.8)
- [CVE-2018-8311](https://insights.sbomify.com/CVE-2018-8311/): Code injection in Microsoft Lync (high 8.8)
- [CVE-2018-8310](https://insights.sbomify.com/CVE-2018-8310/): Other in Microsoft Office (high 7.5)
- [CVE-2018-8309](https://insights.sbomify.com/CVE-2018-8309/): Denial of service in Windows 10 (medium 5.5)
- [CVE-2018-8308](https://insights.sbomify.com/CVE-2018-8308/): Privilege escalation in Windows 10 (medium 6.6)
- [CVE-2018-8307](https://insights.sbomify.com/CVE-2018-8307/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-8306](https://insights.sbomify.com/CVE-2018-8306/): Command injection in Microsoft Wireless Display Adapter V2 Software (medium 5.5)
- [CVE-2018-8305](https://insights.sbomify.com/CVE-2018-8305/): Information disclosure in Mail, Calendar, and People in Windows 8.1 App Store (medium 6.5)
- [CVE-2018-8304](https://insights.sbomify.com/CVE-2018-8304/): Denial of service in Windows 10 (medium 5.9)
- [CVE-2018-8302](https://insights.sbomify.com/CVE-2018-8302/): Memory corruption in Microsoft Exchange Server (critical 9.8)
- [CVE-2018-8301](https://insights.sbomify.com/CVE-2018-8301/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8300](https://insights.sbomify.com/CVE-2018-8300/): Code injection in Microsoft SharePoint (high 8.8)
- [CVE-2018-8299](https://insights.sbomify.com/CVE-2018-8299/): Cross-site scripting in Microsoft SharePoint (medium 5.4)
- [CVE-2018-8298](https://insights.sbomify.com/CVE-2018-8298/): ChakraCore Scripting Engine Type Confusion (high 7.5, exploited in the wild)
- [CVE-2018-8297](https://insights.sbomify.com/CVE-2018-8297/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-8296](https://insights.sbomify.com/CVE-2018-8296/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2018-8294](https://insights.sbomify.com/CVE-2018-8294/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8292](https://insights.sbomify.com/CVE-2018-8292/): .NET Core Information Disclosure (high 7.5)
- [CVE-2018-8291](https://insights.sbomify.com/CVE-2018-8291/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8290](https://insights.sbomify.com/CVE-2018-8290/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8289](https://insights.sbomify.com/CVE-2018-8289/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-8288](https://insights.sbomify.com/CVE-2018-8288/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8287](https://insights.sbomify.com/CVE-2018-8287/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8286](https://insights.sbomify.com/CVE-2018-8286/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8284](https://insights.sbomify.com/CVE-2018-8284/): Code injection in Microsoft .NET Framework (high 8.1)
- [CVE-2018-8283](https://insights.sbomify.com/CVE-2018-8283/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8282](https://insights.sbomify.com/CVE-2018-8282/): Privilege escalation in Windows 10 (high 7.8)
- [CVE-2018-8281](https://insights.sbomify.com/CVE-2018-8281/): Memory corruption in Microsoft Excel Viewer (high 7.8)
- [CVE-2018-8280](https://insights.sbomify.com/CVE-2018-8280/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8279](https://insights.sbomify.com/CVE-2018-8279/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2018-8278](https://insights.sbomify.com/CVE-2018-8278/): Cross-site scripting in Microsoft Edge (medium 6.1)
- [CVE-2018-8276](https://insights.sbomify.com/CVE-2018-8276/): ChakraCore Security Bypass (medium 6.5)
- [CVE-2018-8275](https://insights.sbomify.com/CVE-2018-8275/): Memory corruption in ChakraCore (high 7.5)
- [CVE-2018-8274](https://insights.sbomify.com/CVE-2018-8274/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8273](https://insights.sbomify.com/CVE-2018-8273/): Memory corruption in Microsoft SQL Server (critical 9.8)
- [CVE-2018-8271](https://insights.sbomify.com/CVE-2018-8271/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-8269](https://insights.sbomify.com/CVE-2018-8269/): Denial of service in ASP.NET Core (high 7.5)
- [CVE-2018-8267](https://insights.sbomify.com/CVE-2018-8267/): Memory corruption in Internet Explorer 10 (high 7.5)
- [CVE-2018-8266](https://insights.sbomify.com/CVE-2018-8266/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-8265](https://insights.sbomify.com/CVE-2018-8265/): Code injection in Microsoft Exchange Server (high 7.8)
- [CVE-2018-8262](https://insights.sbomify.com/CVE-2018-8262/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-8260](https://insights.sbomify.com/CVE-2018-8260/): Code injection in .NET Framework (high 8.8)
- [CVE-2018-8256](https://insights.sbomify.com/CVE-2018-8256/): Code injection in Microsoft.PowerShell.Archive (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/12/
