Windows 8.1

Vendor:

First CVE: Oct 9, 2013 · Active for 12 years

2,875
Total CVEs
More Total CVEs than 100% of tracked products
261.4
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 48% of tracked products
5.1%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Windows 8.1 over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 9, 2013
12 years ago
Most Recent CVE
May 31, 2023
1,152 days ago

CVE Severity & Scoring

Windows 8.12,875 CVEs
All CVEs352,713 CVEs
LowMediumHighCritical
Attack Vector
Local1,394 (48.5%)
Network1,235 (43.0%)
Unknown181 (6.3%)
Physical21 (0.7%)
Adjacent Network44 (1.5%)
Attack Complexity
Low2,201 (76.6%)
High493 (17.1%)
Unknown181 (6.3%)
User Interaction
None1,561 (54.3%)
Unknown181 (6.3%)
Required1,133 (39.4%)
Privileges Required
Low1,260 (43.8%)
High75 (2.6%)
None1,359 (47.3%)
Unknown181 (6.3%)

Top CVEs

Signals from CVEs in this product scope (2875 CVEs).

2,875 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-0646CRITICAL
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'.
Jan 14, 20209.899YESYES
CVE-2015-1635CRITICAL
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via c
Apr 14, 20159.899YESYES
CVE-2020-1147HIGH
A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.
Jul 14, 20207.898YESYES
CVE-2017-0148HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.198YESYES
CVE-2017-0147HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20177.598YESYES
CVE-2017-0144HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.898YESYES
CVE-2017-0143HIGH
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol
Mar 17, 20178.898YESYES
CVE-2015-5122CRITICAL
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 1
Jul 14, 20159.898YESYES
CVE-2015-0313CRITICAL
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta
Feb 2, 20159.898YESYES
CVE-2014-6332HIGH
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and
Nov 11, 20148.898YESYES
View all 2,875 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (2875 CVEs).

CISA KEV
148 CVEs
5.1% of CVEs· 97th percentile
Metasploit
57 CVEs
2.0% of CVEs· 96th percentile
Nuclei
2 CVEs
0.1% of CVEs· 96th percentile
ExploitDB
359 CVEs
12.5% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (2875 CVEs).

Media Mentions

Signals from CVEs in this product scope (2875 CVEs).

Top CNAs Publishing CVEs For Windows 8.1

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
rt106.76.5%03