Windows Rt 8.1
Vendor:
First CVE: Oct 9, 2013 · Active for 12 years
2,336
Total CVEs
More Total CVEs than 100% of tracked products
212.4
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 45% of tracked products
5.6%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows Rt 8.1 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 9, 2013
12 years ago
Most Recent CVE
May 31, 2023
1,150 days ago
CVE Severity & Scoring
Windows Rt 8.12,336 CVEs
27%
70%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local1,291 (55.3%)
Network847 (36.3%)
Unknown162 (6.9%)
Physical18 (0.8%)
Adjacent Network18 (0.8%)
Attack Complexity
Low1,747 (74.8%)
High427 (18.3%)
Unknown162 (6.9%)
User Interaction
None1,357 (58.1%)
Unknown162 (6.9%)
Required817 (35.0%)
Privileges Required
Low1,171 (50.1%)
High38 (1.6%)
None965 (41.3%)
Unknown162 (6.9%)
Top CVEs
Signals from CVEs in this product scope (2336 CVEs).
2,336 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-0646CRITICAL A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote Code Execution Injection Vulnerability'. | Jan 14, 2020 | 9.8 | 99 | YES | YES |
CVE-2020-1147HIGH A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '. | Jul 14, 2020 | 7.8 | 98 | YES | YES |
CVE-2017-8464HIGH Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, | Jun 15, 2017 | 8.8 | 98 | YES | YES |
CVE-2017-0148HIGH The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol | Mar 17, 2017 | 8.1 | 98 | YES | YES |
CVE-2017-0147HIGH The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol | Mar 17, 2017 | 7.5 | 98 | YES | YES |
CVE-2017-0144HIGH The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol | Mar 17, 2017 | 8.8 | 98 | YES | YES |
CVE-2017-0143HIGH The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol | Mar 17, 2017 | 8.8 | 98 | YES | YES |
CVE-2015-0313CRITICAL Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote atta | Feb 2, 2015 | 9.8 | 98 | YES | YES |
CVE-2014-6332HIGH OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and | Nov 11, 2014 | 8.8 | 98 | YES | YES |
CVE-2022-30190HIGH A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerab | Jun 1, 2022 | 7.8 | 97 | YES | YES |
Exploit Exposure
Signals from CVEs in this product scope (2336 CVEs).
CISA KEV
131 CVEs
5.6% of CVEs· 97th percentile
Metasploit
49 CVEs
2.1% of CVEs· 96th percentile
Nuclei
1 CVE
0.0% of CVEs· 96th percentile
ExploitDB
284 CVEs
12.2% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (2336 CVEs).
Media Mentions
Signals from CVEs in this product scope (2336 CVEs).
Top CNAs Publishing CVEs For Windows Rt 8.1
Top CWEs
Versions
No cataloged versions.