# Vulnerabilities published in 2018 - [CVE-2018-0816](https://insights.sbomify.com/CVE-2018-0816/): Privilege escalation in Windows (high 7.0) - [CVE-2018-0815](https://insights.sbomify.com/CVE-2018-0815/): Privilege escalation in Windows (high 7.0) - [CVE-2018-0814](https://insights.sbomify.com/CVE-2018-0814/): Information disclosure in Windows kernel (medium 5.5) - [CVE-2018-0813](https://insights.sbomify.com/CVE-2018-0813/): Information disclosure in Windows kernel (medium 5.5) - [CVE-2018-0812](https://insights.sbomify.com/CVE-2018-0812/): Memory corruption in Equation Editor (high 7.8) - [CVE-2018-0811](https://insights.sbomify.com/CVE-2018-0811/): Information disclosure in Windows kernel (medium 5.5) - [CVE-2018-0810](https://insights.sbomify.com/CVE-2018-0810/): Information disclosure in Windows (medium 4.7) - [CVE-2018-0809](https://insights.sbomify.com/CVE-2018-0809/): Privilege escalation in Windows (high 7.0) - [CVE-2018-0808](https://insights.sbomify.com/CVE-2018-0808/): Privilege escalation in ASP.NET Core (high 7.5) - [CVE-2018-0807](https://insights.sbomify.com/CVE-2018-0807/): Memory corruption in Equation Editor (high 8.8) - [CVE-2018-0806](https://insights.sbomify.com/CVE-2018-0806/): Memory corruption in Equation Editor (high 8.8) - [CVE-2018-0805](https://insights.sbomify.com/CVE-2018-0805/): Memory corruption in Equation Editor (high 8.8) - [CVE-2018-0804](https://insights.sbomify.com/CVE-2018-0804/): Memory corruption in Equation Editor (high 8.8) - [CVE-2018-0803](https://insights.sbomify.com/CVE-2018-0803/): Security feature bypass in Microsoft Edge (medium 4.2) - [CVE-2018-0802](https://insights.sbomify.com/CVE-2018-0802/): Microsoft Office Memory Corruption (high 7.8, exploited in the wild) - [CVE-2018-0801](https://insights.sbomify.com/CVE-2018-0801/): Memory corruption in Equation Editor (high 8.8) - [CVE-2018-0800](https://insights.sbomify.com/CVE-2018-0800/): Information disclosure in Microsoft Edge (medium 5.3) - [CVE-2018-0799](https://insights.sbomify.com/CVE-2018-0799/): Cross-site scripting in Microsoft Access (medium 6.1) - [CVE-2018-0798](https://insights.sbomify.com/CVE-2018-0798/): Microsoft Office Memory Corruption (high 8.8, exploited in the wild) - [CVE-2018-0797](https://insights.sbomify.com/CVE-2018-0797/): Memory corruption in Microsoft Office (high 7.8) - [CVE-2018-0796](https://insights.sbomify.com/CVE-2018-0796/): Memory corruption in Microsoft Excel (high 8.8) - [CVE-2018-0795](https://insights.sbomify.com/CVE-2018-0795/): Memory corruption in Microsoft Office (high 8.8) - [CVE-2018-0794](https://insights.sbomify.com/CVE-2018-0794/): Memory corruption in Microsoft Word (high 8.8) - [CVE-2018-0793](https://insights.sbomify.com/CVE-2018-0793/): Memory corruption in Microsoft Outlook (high 7.8) - [CVE-2018-0792](https://insights.sbomify.com/CVE-2018-0792/): Memory corruption in Microsoft Word (high 8.8) - [CVE-2018-0791](https://insights.sbomify.com/CVE-2018-0791/): Memory corruption in Microsoft Outlook (high 7.8) - [CVE-2018-0790](https://insights.sbomify.com/CVE-2018-0790/): Privilege escalation in Microsoft SharePoint (high 8.8) - [CVE-2018-0789](https://insights.sbomify.com/CVE-2018-0789/): Privilege escalation in Microsoft SharePoint Server (high 8.8) - [CVE-2018-0788](https://insights.sbomify.com/CVE-2018-0788/): Privilege escalation in Windows Adobe Type Manager Font Driver (Atmfd.dll) (high 7.0) - [CVE-2018-0787](https://insights.sbomify.com/CVE-2018-0787/): ASP.NET Core allow an elevation of privilege (high 8.8) - [CVE-2018-0786](https://insights.sbomify.com/CVE-2018-0786/): Improper Certificate Validation in Microsoft .NET Framework components (high 7.5) - [CVE-2018-0785](https://insights.sbomify.com/CVE-2018-0785/): Cross-site request forgery in ASP.NET Core (medium 6.5) - [CVE-2018-0784](https://insights.sbomify.com/CVE-2018-0784/): Privilege escalation in ASP.NET Core (high 8.8) - [CVE-2018-0781](https://insights.sbomify.com/CVE-2018-0781/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0780](https://insights.sbomify.com/CVE-2018-0780/): Information disclosure in Microsoft Edge (medium 5.3) - [CVE-2018-0778](https://insights.sbomify.com/CVE-2018-0778/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0777](https://insights.sbomify.com/CVE-2018-0777/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0776](https://insights.sbomify.com/CVE-2018-0776/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0775](https://insights.sbomify.com/CVE-2018-0775/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0774](https://insights.sbomify.com/CVE-2018-0774/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0773](https://insights.sbomify.com/CVE-2018-0773/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0772](https://insights.sbomify.com/CVE-2018-0772/): Memory corruption in Microsoft Edge, Internet Explorer (high 7.5) - [CVE-2018-0771](https://insights.sbomify.com/CVE-2018-0771/): Security feature bypass in Microsoft Edge (medium 4.3) - [CVE-2018-0770](https://insights.sbomify.com/CVE-2018-0770/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0769](https://insights.sbomify.com/CVE-2018-0769/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0768](https://insights.sbomify.com/CVE-2018-0768/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0767](https://insights.sbomify.com/CVE-2018-0767/): Information disclosure in Microsoft Edge (medium 5.3) - [CVE-2018-0766](https://insights.sbomify.com/CVE-2018-0766/): Information disclosure in Microsoft Edge (medium 4.3) - [CVE-2018-0765](https://insights.sbomify.com/CVE-2018-0765/): Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents (high 7.5) - [CVE-2018-0764](https://insights.sbomify.com/CVE-2018-0764/): Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents (high 7.5) - [CVE-2018-0763](https://insights.sbomify.com/CVE-2018-0763/): Information disclosure in Microsoft Edge (low 3.1) - [CVE-2018-0762](https://insights.sbomify.com/CVE-2018-0762/): Memory corruption in Microsoft Edge, Internet Explorer (high 7.5) - [CVE-2018-0761](https://insights.sbomify.com/CVE-2018-0761/): Information disclosure in Microsoft Windows Embedded OpenType (EOT) font engine (medium 5.5) - [CVE-2018-0760](https://insights.sbomify.com/CVE-2018-0760/): Information disclosure in Microsoft Windows Embedded OpenType (EOT) font engine (medium 5.5) - [CVE-2018-0758](https://insights.sbomify.com/CVE-2018-0758/): Memory corruption in Microsoft Edge (high 7.5) - [CVE-2018-0757](https://insights.sbomify.com/CVE-2018-0757/): Information disclosure in Windows (medium 4.7) - [CVE-2018-0756](https://insights.sbomify.com/CVE-2018-0756/): Privilege escalation in Windows (high 7.8) - [CVE-2018-0755](https://insights.sbomify.com/CVE-2018-0755/): Information disclosure in Microsoft Windows Embedded OpenType (EOT) font engine (medium 5.5) - [CVE-2018-0754](https://insights.sbomify.com/CVE-2018-0754/): Information disclosure in Windows Adobe Type Manager Font Driver (Atmfd.dll) (medium 5.5) - [CVE-2018-0753](https://insights.sbomify.com/CVE-2018-0753/): Denial of service in Windows (medium 5.9) - [CVE-2018-0752](https://insights.sbomify.com/CVE-2018-0752/): Privilege escalation in Windows kernel (high 7.8) - [CVE-2018-0751](https://insights.sbomify.com/CVE-2018-0751/): Privilege escalation in Windows (high 7.1) - [CVE-2018-0750](https://insights.sbomify.com/CVE-2018-0750/): Information disclosure in Windows GDI (medium 5.5) - [CVE-2018-0749](https://insights.sbomify.com/CVE-2018-0749/): Privilege escalation in SMB Server (high 7.8) - [CVE-2018-0748](https://insights.sbomify.com/CVE-2018-0748/): Privilege escalation in Windows kernel (high 7.8) - [CVE-2018-0747](https://insights.sbomify.com/CVE-2018-0747/): Information disclosure in Windows kernel (medium 4.7) - [CVE-2018-0746](https://insights.sbomify.com/CVE-2018-0746/): Information disclosure in Windows kernel (medium 4.7) - [CVE-2018-0745](https://insights.sbomify.com/CVE-2018-0745/): Information disclosure in Windows kernel (medium 4.7) - [CVE-2018-0744](https://insights.sbomify.com/CVE-2018-0744/): Privilege escalation in Windows kernel (high 7.0) - [CVE-2018-0743](https://insights.sbomify.com/CVE-2018-0743/): Privilege escalation in Windows Subsystem for Linux (high 7.0) - [CVE-2018-0742](https://insights.sbomify.com/CVE-2018-0742/): Privilege escalation in Windows (high 7.8) - [CVE-2018-0741](https://insights.sbomify.com/CVE-2018-0741/): Information disclosure in Color Management Module (Icm32.dll) (medium 5.3) - [CVE-2018-0739](https://insights.sbomify.com/CVE-2018-0739/): Constructed ASN.1 types with a recursive definition could exceed the stack (medium 6.5) - [CVE-2018-0737](https://insights.sbomify.com/CVE-2018-0737/): Cache timing vulnerability in RSA Key Generation (medium 5.9) - [CVE-2018-0735](https://insights.sbomify.com/CVE-2018-0735/): Timing attack against ECDSA signature generation (medium 5.9) - [CVE-2018-0734](https://insights.sbomify.com/CVE-2018-0734/): Timing attack against DSA (medium 5.9) - [CVE-2018-0733](https://insights.sbomify.com/CVE-2018-0733/): Incorrect CRYPTO_memcmp on HP-UX PA-RISC (medium 5.9) - [CVE-2018-0732](https://insights.sbomify.com/CVE-2018-0732/): Client DoS due to large DH parameter (high 7.5) - [CVE-2018-0730](https://insights.sbomify.com/CVE-2018-0730/): Command injection in QNAP NAS devices (critical 9.8) - [CVE-2018-0729](https://insights.sbomify.com/CVE-2018-0729/): Command injection in QNAP NAS devices (critical 9.8) - [CVE-2018-0728](https://insights.sbomify.com/CVE-2018-0728/): Missing authorization in QNAP NAS devices (high 7.5) - [CVE-2018-0724](https://insights.sbomify.com/CVE-2018-0724/): Cross-site scripting in Q'center Virtual Appliance (medium 6.1) - [CVE-2018-0723](https://insights.sbomify.com/CVE-2018-0723/): Cross-site scripting in Q'center Virtual Appliance (medium 6.1) - [CVE-2018-0722](https://insights.sbomify.com/CVE-2018-0722/): Path traversal in Photo Station (high 7.5) - [CVE-2018-0721](https://insights.sbomify.com/CVE-2018-0721/): Security Advisory for Vulnerabilities in QTS (high 7.7) - [CVE-2018-0719](https://insights.sbomify.com/CVE-2018-0719/): Security Advisory for Vulnerabilities in QTS (medium 5.5) - [CVE-2018-0718](https://insights.sbomify.com/CVE-2018-0718/): Command injection in Music Station (critical 9.8) - [CVE-2018-0716](https://insights.sbomify.com/CVE-2018-0716/): Cross-site scripting in Qsync Central (medium 6.1) - [CVE-2018-0715](https://insights.sbomify.com/CVE-2018-0715/): Cross-site scripting in Photo Station (medium 6.1) - [CVE-2018-0714](https://insights.sbomify.com/CVE-2018-0714/): Command injection in Helpdesk in QTS (critical 9.8) - [CVE-2018-0712](https://insights.sbomify.com/CVE-2018-0712/): Command injection in LDAP Server in QTS (critical 9.8) - [CVE-2018-0711](https://insights.sbomify.com/CVE-2018-0711/): Cross-site scripting in QTS (medium 6.1) - [CVE-2018-0710](https://insights.sbomify.com/CVE-2018-0710/): Command injection in Q'center Virtual Appliance (high 8.8) - [CVE-2018-0709](https://insights.sbomify.com/CVE-2018-0709/): Command injection in Q'center Virtual Appliance (high 8.8) - [CVE-2018-0708](https://insights.sbomify.com/CVE-2018-0708/): Command injection in Q'center Virtual Appliance (high 8.8) - [CVE-2018-0707](https://insights.sbomify.com/CVE-2018-0707/): Command injection in Q'center Virtual Appliance (high 7.2) - [CVE-2018-0706](https://insights.sbomify.com/CVE-2018-0706/): Information disclosure in Q'center Virtual Appliance (high 8.8) - [CVE-2018-0705](https://insights.sbomify.com/CVE-2018-0705/): Path traversal in Cybozu Dezie (critical 9.1) - [CVE-2018-0704](https://insights.sbomify.com/CVE-2018-0704/): Path traversal in Cybozu Office (high 7.5) - [CVE-2018-0703](https://insights.sbomify.com/CVE-2018-0703/): Path traversal in Cybozu Office (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/156/