# Vulnerabilities published in 2018


- [CVE-2018-0922](https://insights.sbomify.com/CVE-2018-0922/): Memory corruption in Microsoft Office (high 7.8)
- [CVE-2018-0921](https://insights.sbomify.com/CVE-2018-0921/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0920](https://insights.sbomify.com/CVE-2018-0920/): Memory corruption in Microsoft Excel (high 7.8)
- [CVE-2018-0919](https://insights.sbomify.com/CVE-2018-0919/): Information disclosure in Microsoft Office (low 3.3)
- [CVE-2018-0917](https://insights.sbomify.com/CVE-2018-0917/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0916](https://insights.sbomify.com/CVE-2018-0916/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0915](https://insights.sbomify.com/CVE-2018-0915/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0914](https://insights.sbomify.com/CVE-2018-0914/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0913](https://insights.sbomify.com/CVE-2018-0913/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0912](https://insights.sbomify.com/CVE-2018-0912/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0911](https://insights.sbomify.com/CVE-2018-0911/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0910](https://insights.sbomify.com/CVE-2018-0910/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0909](https://insights.sbomify.com/CVE-2018-0909/): Cross-site scripting in Microsoft SharePoint (high 8.8)
- [CVE-2018-0908](https://insights.sbomify.com/CVE-2018-0908/): Cross-site scripting in Microsoft Identity Manager (medium 6.1)
- [CVE-2018-0907](https://insights.sbomify.com/CVE-2018-0907/): Security feature bypass in Microsoft Excel (high 7.8)
- [CVE-2018-0904](https://insights.sbomify.com/CVE-2018-0904/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0903](https://insights.sbomify.com/CVE-2018-0903/): Memory corruption in Microsoft Access (high 7.8)
- [CVE-2018-0902](https://insights.sbomify.com/CVE-2018-0902/): Security feature bypass in Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) (high 7.8)
- [CVE-2018-0901](https://insights.sbomify.com/CVE-2018-0901/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0900](https://insights.sbomify.com/CVE-2018-0900/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0899](https://insights.sbomify.com/CVE-2018-0899/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0898](https://insights.sbomify.com/CVE-2018-0898/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0897](https://insights.sbomify.com/CVE-2018-0897/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0896](https://insights.sbomify.com/CVE-2018-0896/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0895](https://insights.sbomify.com/CVE-2018-0895/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0894](https://insights.sbomify.com/CVE-2018-0894/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2018-0893](https://insights.sbomify.com/CVE-2018-0893/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-0892](https://insights.sbomify.com/CVE-2018-0892/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-0891](https://insights.sbomify.com/CVE-2018-0891/): Information disclosure in ChakraCore, Microsoft Edge, Internet Explorer (medium 4.3)
- [CVE-2018-0890](https://insights.sbomify.com/CVE-2018-0890/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-0889](https://insights.sbomify.com/CVE-2018-0889/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-0888](https://insights.sbomify.com/CVE-2018-0888/): Information disclosure in Hyper-V Network SwitchHyper-V Network Switch (medium 5.6)
- [CVE-2018-0887](https://insights.sbomify.com/CVE-2018-0887/): Information disclosure in Windows 10 (medium 5.5)
- [CVE-2018-0886](https://insights.sbomify.com/CVE-2018-0886/): Auth bypass in Windows (high 7.0)
- [CVE-2018-0885](https://insights.sbomify.com/CVE-2018-0885/): Denial of service in Microsoft Hyper-V Network Switch (medium 5.8)
- [CVE-2018-0884](https://insights.sbomify.com/CVE-2018-0884/): Security feature bypass in Windows Scripting Host (high 7.8)
- [CVE-2018-0883](https://insights.sbomify.com/CVE-2018-0883/): Other in Windows Shell (high 7.5)
- [CVE-2018-0882](https://insights.sbomify.com/CVE-2018-0882/): Privilege escalation in Windows Deskop Bridge (high 7.0)
- [CVE-2018-0881](https://insights.sbomify.com/CVE-2018-0881/): Privilege escalation in Windows (high 7.0)
- [CVE-2018-0880](https://insights.sbomify.com/CVE-2018-0880/): Privilege escalation in Windows Desktop Bridge (high 7.0)
- [CVE-2018-0879](https://insights.sbomify.com/CVE-2018-0879/): Information disclosure in Microsoft Edge (high 7.5)
- [CVE-2018-0878](https://insights.sbomify.com/CVE-2018-0878/): XML external entity in Windows Remote Assistance (low 3.1)
- [CVE-2018-0877](https://insights.sbomify.com/CVE-2018-0877/): Privilege escalation in Windows Desktop Bridge Virtual File System (high 7.8)
- [CVE-2018-0876](https://insights.sbomify.com/CVE-2018-0876/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-0875](https://insights.sbomify.com/CVE-2018-0875/): .NET Core Denial of Service Vulnerability (high 7.5)
- [CVE-2018-0874](https://insights.sbomify.com/CVE-2018-0874/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0873](https://insights.sbomify.com/CVE-2018-0873/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0872](https://insights.sbomify.com/CVE-2018-0872/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0871](https://insights.sbomify.com/CVE-2018-0871/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-0870](https://insights.sbomify.com/CVE-2018-0870/): Memory corruption in Internet Explorer 11 (high 7.5)
- [CVE-2018-0869](https://insights.sbomify.com/CVE-2018-0869/): Cross-site scripting in SharePoint Server (medium 5.4)
- [CVE-2018-0868](https://insights.sbomify.com/CVE-2018-0868/): Privilege escalation in Windows Installer (high 7.0)
- [CVE-2018-0866](https://insights.sbomify.com/CVE-2018-0866/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2018-0864](https://insights.sbomify.com/CVE-2018-0864/): Cross-site scripting in microsoft:sharepoint server (medium 5.4)
- [CVE-2018-0862](https://insights.sbomify.com/CVE-2018-0862/): Memory corruption in Equation Editor (high 8.8)
- [CVE-2018-0861](https://insights.sbomify.com/CVE-2018-0861/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2018-0860](https://insights.sbomify.com/CVE-2018-0860/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0859](https://insights.sbomify.com/CVE-2018-0859/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0858](https://insights.sbomify.com/CVE-2018-0858/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0857](https://insights.sbomify.com/CVE-2018-0857/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0856](https://insights.sbomify.com/CVE-2018-0856/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0855](https://insights.sbomify.com/CVE-2018-0855/): Information disclosure in Windows Embedded OpenType (EOT) font engine (medium 4.3)
- [CVE-2018-0854](https://insights.sbomify.com/CVE-2018-0854/): Security feature bypass in Windows 10 (medium 5.3)
- [CVE-2018-0853](https://insights.sbomify.com/CVE-2018-0853/): Information disclosure in Microsoft Office (low 3.3)
- [CVE-2018-0852](https://insights.sbomify.com/CVE-2018-0852/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-0851](https://insights.sbomify.com/CVE-2018-0851/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-0850](https://insights.sbomify.com/CVE-2018-0850/): Privilege escalation in Microsoft Outlook (medium 6.5)
- [CVE-2018-0849](https://insights.sbomify.com/CVE-2018-0849/): Memory corruption in Equation Editor (high 8.8)
- [CVE-2018-0848](https://insights.sbomify.com/CVE-2018-0848/): Memory corruption in Equation Editor (high 8.8)
- [CVE-2018-0847](https://insights.sbomify.com/CVE-2018-0847/): Information disclosure in Internet Explorer (medium 4.3)
- [CVE-2018-0846](https://insights.sbomify.com/CVE-2018-0846/): Privilege escalation in Windows Common Log File System (high 7.8)
- [CVE-2018-0845](https://insights.sbomify.com/CVE-2018-0845/): Memory corruption in Equation Editor (high 7.8)
- [CVE-2018-0844](https://insights.sbomify.com/CVE-2018-0844/): Privilege escalation in Windows Common Log File System (high 7.8)
- [CVE-2018-0843](https://insights.sbomify.com/CVE-2018-0843/): Information disclosure in Windows (medium 4.7)
- [CVE-2018-0842](https://insights.sbomify.com/CVE-2018-0842/): Privilege escalation in Windows (high 7.0)
- [CVE-2018-0841](https://insights.sbomify.com/CVE-2018-0841/): Memory corruption in Microsoft Office (high 8.8)
- [CVE-2018-0840](https://insights.sbomify.com/CVE-2018-0840/): Memory corruption in Microsoft Edge, ChakraCore, Internet Explorer (high 7.5)
- [CVE-2018-0839](https://insights.sbomify.com/CVE-2018-0839/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2018-0838](https://insights.sbomify.com/CVE-2018-0838/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0837](https://insights.sbomify.com/CVE-2018-0837/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0836](https://insights.sbomify.com/CVE-2018-0836/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0835](https://insights.sbomify.com/CVE-2018-0835/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0834](https://insights.sbomify.com/CVE-2018-0834/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0833](https://insights.sbomify.com/CVE-2018-0833/): Null dereference in Server Message Block (medium 5.3)
- [CVE-2018-0832](https://insights.sbomify.com/CVE-2018-0832/): Information disclosure in Windows (medium 4.7)
- [CVE-2018-0831](https://insights.sbomify.com/CVE-2018-0831/): Privilege escalation in Windows (high 7.8)
- [CVE-2018-0830](https://insights.sbomify.com/CVE-2018-0830/): Information disclosure in Windows (medium 4.7)
- [CVE-2018-0829](https://insights.sbomify.com/CVE-2018-0829/): Information disclosure in Windows (medium 4.7)
- [CVE-2018-0828](https://insights.sbomify.com/CVE-2018-0828/): Information disclosure in Windows (high 7.8)
- [CVE-2018-0827](https://insights.sbomify.com/CVE-2018-0827/): Security feature bypass in Windows Scripting Host (medium 5.3)
- [CVE-2018-0826](https://insights.sbomify.com/CVE-2018-0826/): Privilege escalation in Windows Storage Services (high 7.0)
- [CVE-2018-0825](https://insights.sbomify.com/CVE-2018-0825/): Memory corruption in StructuredQuery (high 7.5)
- [CVE-2018-0824](https://insights.sbomify.com/CVE-2018-0824/): Microsoft COM for Windows Deserialization of Untrusted Data (high 7.5, exploited in the wild)
- [CVE-2018-0823](https://insights.sbomify.com/CVE-2018-0823/): Privilege escalation in Named Pipe File System (high 7.0)
- [CVE-2018-0822](https://insights.sbomify.com/CVE-2018-0822/): Privilege escalation in NTFS (high 7.0)
- [CVE-2018-0821](https://insights.sbomify.com/CVE-2018-0821/): Privilege escalation in AppContainer (high 7.0)
- [CVE-2018-0820](https://insights.sbomify.com/CVE-2018-0820/): Privilege escalation in microsoft:windows 10 (high 7.8)
- [CVE-2018-0819](https://insights.sbomify.com/CVE-2018-0819/): Other in Microsoft Office 2016 for Mac (medium 6.5)
- [CVE-2018-0818](https://insights.sbomify.com/CVE-2018-0818/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2018-0817](https://insights.sbomify.com/CVE-2018-0817/): Privilege escalation in Windows (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2018/page/155/