# Microsoft Windows 8.1 vulnerabilities Source: https://junglewise.ai/threats/technologies/windows-8-1 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows-8-1.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 100 vulnerabilities in Microsoft Windows 8.1: 0 in the last 7 days and 0 in the last 90 days, 100 of them critical and 100 exploited in the wild. The most recent, CVE-2018-8639, was published on 3 March 2025. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 100 (100 critical, 100 exploited in the wild) ## About Microsoft Windows 8.1 Personal computer operating system released by Microsoft in 2013. ## Latest Microsoft Windows 8.1 vulnerabilities - [CVE-2018-8639: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability](https://junglewise.ai/threats/cve-2018-8639-microsoft-windows-win32k-improper-resource-shutdown-or-release) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2025) - [CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2018-0824-microsoft-com-for-windows-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 8.8, published 5 Aug 2024) - [CVE-2022-38028: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-38028-microsoft-windows-print-spooler-privilege-escalation) (critical, exploited in the wild, CVSS 7.8, published 23 Apr 2024) - [CVE-2016-0165: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2016-0165-microsoft-win32k-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 22 Jun 2023) - [CVE-2019-1388: Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2019-1388-microsoft-windows-certificate-dialog-privilege-escalation) (critical, exploited in the wild, CVSS 7.8, published 7 Apr 2023) - [CVE-2022-41049: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability](https://junglewise.ai/threats/cve-2022-41049-microsoft-windows-mark-of-the-web-motw-security-feature-bypass) (critical, exploited in the wild, CVSS 5.4, published 14 Nov 2022) - [CVE-2022-41073: Microsoft Windows Print Spooler Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41073-microsoft-windows-print-spooler-privilege-escalation) (critical, exploited in the wild, CVSS 7.8, published 8 Nov 2022) - [CVE-2022-41128: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-41128-microsoft-windows-scripting-languages-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 8 Nov 2022) - [CVE-2022-41125: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41125-microsoft-windows-cng-key-isolation-service-privilege-escalation) (critical, exploited in the wild, CVSS 7.8, published 8 Nov 2022) - [CVE-2022-41033: Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-41033-microsoft-windows-com-event-system-service-privilege-escalation) (critical, exploited in the wild, CVSS 7.8, published 11 Oct 2022) - [CVE-2022-37969: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-37969-microsoft-windows-common-log-file-system-clfs-driver-privilege) (critical, exploited in the wild, CVSS 7.8, published 14 Sep 2022) - [CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-34713-microsoft-windows-support-diagnostic-tool-msdt-remote-code) (critical, exploited in the wild, CVSS 7.8, published 9 Aug 2022) - [CVE-2022-22047: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2022-22047-microsoft-windows-client-server-runtime-subsystem-csrss-privilege) (critical, exploited in the wild, CVSS 7.8, published 12 Jul 2022) - [CVE-2022-26925: Microsoft Windows LSA Spoofing Vulnerability](https://junglewise.ai/threats/cve-2022-26925-microsoft-windows-lsa-spoofing-vulnerability) (critical, exploited in the wild, CVSS 8.1, published 1 Jul 2022) - [CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-30190-microsoft-windows-support-diagnostic-tool-msdt-remote-code) (critical, exploited in the wild, CVSS 7.8, published 14 Jun 2022) - [CVE-2015-2360: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-2360-microsoft-win32k-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2015-1769: Microsoft Windows Mount Manager Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-1769-microsoft-windows-mount-manager-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.2, published 25 May 2022) - [CVE-2016-7256: Microsoft Windows Open Type Font Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-7256-microsoft-windows-open-type-font-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2014-4148: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-4148-microsoft-windows-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2015-0016: Microsoft Windows TS WebProxy Directory Traversal Vulnerability](https://junglewise.ai/threats/cve-2015-0016-microsoft-windows-ts-webproxy-directory-traversal-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 25 May 2022) - [CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 24 May 2022) - [CVE-2018-8611: Microsoft Windows Kernel Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2018-8611-microsoft-windows-kernel-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 24 May 2022) - [CVE-2017-0022: Microsoft XML Core Services Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-0022-microsoft-xml-core-services-information-disclosure-vulnerability) (critical, exploited in the wild, CVSS 6.5, published 24 May 2022) - [CVE-2017-0147: Microsoft Windows SMBv1 Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2017-0147-microsoft-windows-smbv1-information-disclosure-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 24 May 2022) - [CVE-2017-0005: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2017-0005-microsoft-windows-graphics-device-interface-gdi-privilege) (critical, exploited in the wild, CVSS 7.8, published 24 May 2022) ## Most severe Microsoft Windows 8.1 vulnerabilities - [CVE-2017-8543: Microsoft Windows Search Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2017-8543-microsoft-windows-search-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 24 May 2022) - [CVE-2015-1635: Microsoft HTTP.sys Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1635-microsoft-http-sys-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 10 Feb 2022) - [CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-6332-microsoft-windows-object-linking-embedding-ole-automation-array) (critical, exploited in the wild, CVSS 9.3, published 25 Mar 2022) - [CVE-2014-4114: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-4114-microsoft-windows-object-linking-embedding-ole-remote-code) (critical, exploited in the wild, CVSS 9.3, published 3 Mar 2022) - [CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability](https://junglewise.ai/threats/cve-2018-0824-microsoft-com-for-windows-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 8.8, published 5 Aug 2024) - [CVE-2022-41128: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2022-41128-microsoft-windows-scripting-languages-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 8 Nov 2022) - [CVE-2015-2360: Microsoft Win32k Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2015-2360-microsoft-win32k-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2016-7256: Microsoft Windows Open Type Font Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2016-7256-microsoft-windows-open-type-font-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2014-4148: Microsoft Windows Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2014-4148-microsoft-windows-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 May 2022) - [CVE-2015-2426: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-2426-microsoft-windows-adobe-type-manager-library-remote-code-execution) (critical, exploited in the wild, CVSS 8.8, published 28 Mar 2022) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows 8.1 vulnerabilities", https://junglewise.ai/threats/technologies/windows-8-1, 11 November 2026.