Windows Rt
Vendor:
First CVE: Sep 26, 2012 · Active for 13 years
247
Total CVEs
More Total CVEs than 100% of tracked products
49.4
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 43% of tracked products
9.7%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows Rt over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 26, 2012
13 years ago
Most Recent CVE
Aug 9, 2016
3,636 days ago
CVE Severity & Scoring
Windows Rt247 CVEs
10%
20%
68%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local17 (6.9%)
Network22 (8.9%)
Unknown207 (83.8%)
Physical1 (0.4%)
Adjacent Network0 (0.0%)
Attack Complexity
Low35 (14.2%)
High5 (2.0%)
Unknown207 (83.8%)
User Interaction
None16 (6.5%)
Unknown207 (83.8%)
Required24 (9.7%)
Privileges Required
Low10 (4.0%)
High0 (0.0%)
None30 (12.1%)
Unknown207 (83.8%)
Top CVEs
Signals from CVEs in this product scope (247 CVEs).
247 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-0313CRITICAL Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta | Feb 2, 2015 | 9.8 | 98 | YES | YES |
CVE-2014-6332HIGH OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and | Nov 11, 2014 | 8.8 | 98 | YES | YES |
CVE-2015-2426HIGH Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W | Jul 20, 2015 | 8.8 | 97 | YES | YES |
CVE-2015-0311CRITICAL Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote a | Jan 23, 2015 | 9.8 | 97 | YES | YES |
CVE-2014-4114HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote at | Oct 15, 2014 | 7.8 | 97 | YES | YES |
CVE-2014-4113HIGH win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se | Oct 15, 2014 | 7.8 | 97 | YES | YES |
CVE-2014-0322HIGH Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and t | Feb 14, 2014 | 8.8 | 97 | YES | YES |
CVE-2015-0016HIGH Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Win | Jan 13, 2015 | 7.8 | 96 | YES | YES |
CVE-2014-6352HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote at | Oct 22, 2014 | 7.8 | 96 | YES | YES |
CVE-2013-3918HIGH The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 | Nov 12, 2013 | 8.8 | 96 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (247 CVEs).
CISA KEV
24 CVEs
9.7% of CVEs· 97th percentile
Metasploit
21 CVEs
8.5% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
84 CVEs
34.0% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (247 CVEs).
Media Mentions
Signals from CVEs in this product scope (247 CVEs).
Top CNAs Publishing CVEs For Windows Rt
Top CWEs
Versions
No cataloged versions.