# Vulnerabilities published in 2018 - [CVE-2018-8254](https://insights.sbomify.com/CVE-2018-8254/): Cross-site scripting in Microsoft Project Server (medium 5.4) - [CVE-2018-8253](https://insights.sbomify.com/CVE-2018-8253/): Security feature bypass in Windows 10 (medium 4.6) - [CVE-2018-8252](https://insights.sbomify.com/CVE-2018-8252/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8251](https://insights.sbomify.com/CVE-2018-8251/): Memory corruption in Windows 10 (high 7.5) - [CVE-2018-8249](https://insights.sbomify.com/CVE-2018-8249/): Memory corruption in Internet Explorer 11 (high 7.5) - [CVE-2018-8248](https://insights.sbomify.com/CVE-2018-8248/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8247](https://insights.sbomify.com/CVE-2018-8247/): Cross-site scripting in Microsoft Office (medium 5.4) - [CVE-2018-8246](https://insights.sbomify.com/CVE-2018-8246/): Information disclosure in n/a (medium 5.5) - [CVE-2018-8245](https://insights.sbomify.com/CVE-2018-8245/): Code injection in Microsoft Publisher (high 7.8) - [CVE-2018-8244](https://insights.sbomify.com/CVE-2018-8244/): Privilege escalation in Microsoft Office (medium 6.5) - [CVE-2018-8243](https://insights.sbomify.com/CVE-2018-8243/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8242](https://insights.sbomify.com/CVE-2018-8242/): Memory corruption in Internet Explorer 10 (high 7.5) - [CVE-2018-8239](https://insights.sbomify.com/CVE-2018-8239/): Information disclosure in Windows 10 (medium 5.5) - [CVE-2018-8238](https://insights.sbomify.com/CVE-2018-8238/): Security feature bypass in Microsoft Lync (high 7.8) - [CVE-2018-8236](https://insights.sbomify.com/CVE-2018-8236/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-8235](https://insights.sbomify.com/CVE-2018-8235/): Security feature bypass in Microsoft Edge (medium 4.3) - [CVE-2018-8234](https://insights.sbomify.com/CVE-2018-8234/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2018-8233](https://insights.sbomify.com/CVE-2018-8233/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8232](https://insights.sbomify.com/CVE-2018-8232/): Code injection in Microsoft Visual Studio (high 7.8) - [CVE-2018-8231](https://insights.sbomify.com/CVE-2018-8231/): Memory corruption in Windows 10 (high 8.1) - [CVE-2018-8229](https://insights.sbomify.com/CVE-2018-8229/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8227](https://insights.sbomify.com/CVE-2018-8227/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8226](https://insights.sbomify.com/CVE-2018-8226/): A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. (high 7.5) - [CVE-2018-8225](https://insights.sbomify.com/CVE-2018-8225/): Memory corruption in Windows 10 (high 8.1) - [CVE-2018-8224](https://insights.sbomify.com/CVE-2018-8224/): Privilege escalation in Windows 7 (high 7.0) - [CVE-2018-8222](https://insights.sbomify.com/CVE-2018-8222/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8221](https://insights.sbomify.com/CVE-2018-8221/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8219](https://insights.sbomify.com/CVE-2018-8219/): Privilege escalation in Windows 10 (high 8.8) - [CVE-2018-8218](https://insights.sbomify.com/CVE-2018-8218/): Denial of service in Windows 10 (high 7.7) - [CVE-2018-8217](https://insights.sbomify.com/CVE-2018-8217/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8216](https://insights.sbomify.com/CVE-2018-8216/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8215](https://insights.sbomify.com/CVE-2018-8215/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8214](https://insights.sbomify.com/CVE-2018-8214/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8213](https://insights.sbomify.com/CVE-2018-8213/): Memory corruption in Windows 10 (high 7.8) - [CVE-2018-8212](https://insights.sbomify.com/CVE-2018-8212/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8211](https://insights.sbomify.com/CVE-2018-8211/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8210](https://insights.sbomify.com/CVE-2018-8210/): Memory corruption in Windows 10 (high 7.8) - [CVE-2018-8209](https://insights.sbomify.com/CVE-2018-8209/): Information disclosure in Windows 10 (high 8.0) - [CVE-2018-8208](https://insights.sbomify.com/CVE-2018-8208/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8207](https://insights.sbomify.com/CVE-2018-8207/): Information disclosure in Windows 10 (medium 4.7) - [CVE-2018-8206](https://insights.sbomify.com/CVE-2018-8206/): Denial of service in Windows 10 (high 7.5) - [CVE-2018-8205](https://insights.sbomify.com/CVE-2018-8205/): Denial of service in Windows 10 (medium 5.5) - [CVE-2018-8204](https://insights.sbomify.com/CVE-2018-8204/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8202](https://insights.sbomify.com/CVE-2018-8202/): Privilege escalation in Microsoft .NET Framework (high 7.8) - [CVE-2018-8201](https://insights.sbomify.com/CVE-2018-8201/): Security feature bypass in Windows 10 (medium 4.5) - [CVE-2018-8200](https://insights.sbomify.com/CVE-2018-8200/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8179](https://insights.sbomify.com/CVE-2018-8179/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-8178](https://insights.sbomify.com/CVE-2018-8178/): Memory corruption in ChakraCore (high 7.5) - [CVE-2018-8177](https://insights.sbomify.com/CVE-2018-8177/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8176](https://insights.sbomify.com/CVE-2018-8176/): Code injection in Microsoft Office (high 8.8) - [CVE-2018-8175](https://insights.sbomify.com/CVE-2018-8175/): Denial of service in Windows 10 (medium 6.5) - [CVE-2018-8174](https://insights.sbomify.com/CVE-2018-8174/): Microsoft Windows VBScript Engine Out-of-Bounds Write (high 7.5, exploited in the wild) - [CVE-2018-8173](https://insights.sbomify.com/CVE-2018-8173/): Memory corruption in Microsoft Infopath (high 7.8) - [CVE-2018-8172](https://insights.sbomify.com/CVE-2018-8172/): Code injection in Expression Blend 4 (high 7.8) - [CVE-2018-8171](https://insights.sbomify.com/CVE-2018-8171/): Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated (high 7.5) - [CVE-2018-8170](https://insights.sbomify.com/CVE-2018-8170/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8169](https://insights.sbomify.com/CVE-2018-8169/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8168](https://insights.sbomify.com/CVE-2018-8168/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8167](https://insights.sbomify.com/CVE-2018-8167/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8166](https://insights.sbomify.com/CVE-2018-8166/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8165](https://insights.sbomify.com/CVE-2018-8165/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8164](https://insights.sbomify.com/CVE-2018-8164/): Privilege escalation in Windows 10 (high 7.8) - [CVE-2018-8163](https://insights.sbomify.com/CVE-2018-8163/): Information disclosure in n/a (medium 5.5) - [CVE-2018-8162](https://insights.sbomify.com/CVE-2018-8162/): Memory corruption in Microsoft Excel (high 7.8) - [CVE-2018-8161](https://insights.sbomify.com/CVE-2018-8161/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8160](https://insights.sbomify.com/CVE-2018-8160/): Information disclosure in Microsoft Office (medium 6.5) - [CVE-2018-8159](https://insights.sbomify.com/CVE-2018-8159/): Cross-site scripting in Microsoft Exchange Server (medium 5.4) - [CVE-2018-8158](https://insights.sbomify.com/CVE-2018-8158/): Memory corruption in n/a (high 7.8) - [CVE-2018-8157](https://insights.sbomify.com/CVE-2018-8157/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-8156](https://insights.sbomify.com/CVE-2018-8156/): Cross-site scripting in Microsoft Project Server (medium 5.4) - [CVE-2018-8155](https://insights.sbomify.com/CVE-2018-8155/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8154](https://insights.sbomify.com/CVE-2018-8154/): Memory corruption in Microsoft Exchange Server (critical 9.8) - [CVE-2018-8153](https://insights.sbomify.com/CVE-2018-8153/): Other in Microsoft Exchange Server (medium 5.4) - [CVE-2018-8152](https://insights.sbomify.com/CVE-2018-8152/): Cross-site scripting in Microsoft Exchange Server (medium 5.4) - [CVE-2018-8151](https://insights.sbomify.com/CVE-2018-8151/): Information disclosure in Microsoft Exchange Server (medium 4.3) - [CVE-2018-8150](https://insights.sbomify.com/CVE-2018-8150/): Security feature bypass in Microsoft Office (medium 6.5) - [CVE-2018-8149](https://insights.sbomify.com/CVE-2018-8149/): Cross-site scripting in Microsoft SharePoint (medium 5.4) - [CVE-2018-8148](https://insights.sbomify.com/CVE-2018-8148/): Memory corruption in Microsoft Excel (high 7.8) - [CVE-2018-8147](https://insights.sbomify.com/CVE-2018-8147/): Memory corruption in Microsoft Excel (high 7.8) - [CVE-2018-8145](https://insights.sbomify.com/CVE-2018-8145/): ChakraCore information disclosure vulnerability (high 7.5) - [CVE-2018-8142](https://insights.sbomify.com/CVE-2018-8142/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8141](https://insights.sbomify.com/CVE-2018-8141/): Information disclosure in Windows 10 (medium 4.7) - [CVE-2018-8140](https://insights.sbomify.com/CVE-2018-8140/): Privilege escalation in Windows 10 (medium 6.8) - [CVE-2018-8139](https://insights.sbomify.com/CVE-2018-8139/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8137](https://insights.sbomify.com/CVE-2018-8137/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8136](https://insights.sbomify.com/CVE-2018-8136/): Memory corruption in Windows 10 (high 7.8) - [CVE-2018-8134](https://insights.sbomify.com/CVE-2018-8134/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8133](https://insights.sbomify.com/CVE-2018-8133/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8132](https://insights.sbomify.com/CVE-2018-8132/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8130](https://insights.sbomify.com/CVE-2018-8130/): ChakraCore RCE Vulnerability (high 7.5) - [CVE-2018-8129](https://insights.sbomify.com/CVE-2018-8129/): Security feature bypass in Windows 10 (medium 5.3) - [CVE-2018-8128](https://insights.sbomify.com/CVE-2018-8128/): Memory corruption in ChakraCore (high 7.5) - [CVE-2018-8127](https://insights.sbomify.com/CVE-2018-8127/): Information disclosure in Windows 10 (medium 5.5) - [CVE-2018-8126](https://insights.sbomify.com/CVE-2018-8126/): Security feature bypass in Internet Explorer 11 (high 8.8) - [CVE-2018-8125](https://insights.sbomify.com/CVE-2018-8125/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-8124](https://insights.sbomify.com/CVE-2018-8124/): Privilege escalation in Windows 10 (high 7.0) - [CVE-2018-8123](https://insights.sbomify.com/CVE-2018-8123/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2018-8122](https://insights.sbomify.com/CVE-2018-8122/): Memory corruption in Internet Explorer 11 (high 7.5) - [CVE-2018-8121](https://insights.sbomify.com/CVE-2018-8121/): Information disclosure in Windows 10 (medium 4.7) - [CVE-2018-8120](https://insights.sbomify.com/CVE-2018-8120/): Microsoft Win32k Privilege Escalation (high 7.0, exploited in the wild) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/13/