# Windows 8 vulnerabilities > Windows 8 is made by Microsoft. We track 324 published vulnerabilities in it, across 1 version. 32 of them are on the list of flaws known to be exploited, the newest added on 6 October 2025. If you run Windows 8, check your version against the exploited flaws below and patch those first. Canonical page: https://www.precursorintelligence.com/product/microsoft/windows_8 ## At a glance - **Made by:** [Microsoft](https://www.precursorintelligence.com/vendors/microsoft) - **Published vulnerabilities:** 324 - **Known to be exploited:** 32 - **Versions tracked:** 1 - **Most recently added to the known-exploited list:** [CVE-2013-3918](https://www.precursorintelligence.com/what-is/cve-2013-3918), 6 October 2025. We keep watching the list. ## Which Windows 8 vulnerabilities are being exploited? 32 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2013-3918](https://www.precursorintelligence.com/what-is/cve-2013-3918): Microsoft Windows Out-of-Bounds Write Vulnerability. High, CVSS 8.8, chance of use in 30 days 74%, known exploited since 6 October 2025. - [CVE-2013-3163](https://www.precursorintelligence.com/what-is/cve-2013-3163): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 71%, known exploited since 30 March 2023. - [CVE-2012-1889](https://www.precursorintelligence.com/what-is/cve-2012-1889): Microsoft XML Core Services Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 84%, known exploited since 8 June 2022. - [CVE-2013-7331](https://www.precursorintelligence.com/what-is/cve-2013-7331): Microsoft Internet Explorer Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 50%, known exploited since 25 May 2022. - [CVE-2014-4148](https://www.precursorintelligence.com/what-is/cve-2014-4148): Microsoft Windows Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 60%, known exploited since 25 May 2022. - [CVE-2015-2360](https://www.precursorintelligence.com/what-is/cve-2015-2360): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 15%, known exploited since 25 May 2022. - [CVE-2015-1769](https://www.precursorintelligence.com/what-is/cve-2015-1769): Microsoft Windows Mount Manager Privilege Escalation Vulnerability. Medium, CVSS 6.6, chance of use in 30 days 4.1%, known exploited since 25 May 2022. - [CVE-2015-0016](https://www.precursorintelligence.com/what-is/cve-2015-0016): Microsoft Windows TS WebProxy Directory Traversal Vulnerability. High, CVSS 7.8, chance of use in 30 days 76%, known exploited since 25 May 2022. - [CVE-2014-4123](https://www.precursorintelligence.com/what-is/cve-2014-4123): Microsoft Internet Explorer Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 47%, known exploited since 25 May 2022. - [CVE-2015-1671](https://www.precursorintelligence.com/what-is/cve-2015-1671): Microsoft Windows Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 49%, known exploited since 25 May 2022. - [CVE-2015-0071](https://www.precursorintelligence.com/what-is/cve-2015-0071): Microsoft Internet Explorer ASLR Bypass Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 34%, known exploited since 25 May 2022. - [CVE-2014-2817](https://www.precursorintelligence.com/what-is/cve-2014-2817): Microsoft Internet Explorer Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 26%, known exploited since 25 May 2022. - [CVE-2014-0322](https://www.precursorintelligence.com/what-is/cve-2014-0322): Microsoft Internet Explorer Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 85%, known exploited since 4 May 2022. - [CVE-2014-4113](https://www.precursorintelligence.com/what-is/cve-2014-4113): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 4 May 2022. - [CVE-2015-5122](https://www.precursorintelligence.com/what-is/cve-2015-5122): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 94%, known exploited since 13 April 2022. - [CVE-2015-0311](https://www.precursorintelligence.com/what-is/cve-2015-0311): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 86%, known exploited since 13 April 2022. - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 13 April 2022. - [CVE-2015-2502](https://www.precursorintelligence.com/what-is/cve-2015-2502): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 51%, known exploited since 13 April 2022. - [CVE-2013-2551](https://www.precursorintelligence.com/what-is/cve-2013-2551): Microsoft Internet Explorer Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 74%, known exploited since 28 March 2022. - [CVE-2015-2419](https://www.precursorintelligence.com/what-is/cve-2015-2419): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 53%, known exploited since 28 March 2022. - [CVE-2013-3660](https://www.precursorintelligence.com/what-is/cve-2013-3660): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 39%, known exploited since 28 March 2022. - [CVE-2015-2426](https://www.precursorintelligence.com/what-is/cve-2015-2426): Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 87%, known exploited since 28 March 2022. - [CVE-2014-6332](https://www.precursorintelligence.com/what-is/cve-2014-6332): Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 95%, known exploited since 25 March 2022. - [CVE-2014-6324](https://www.precursorintelligence.com/what-is/cve-2014-6324): Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 87%, known exploited since 25 March 2022. - [CVE-2015-2546](https://www.precursorintelligence.com/what-is/cve-2015-2546): Microsoft Win32k Memory Corruption Vulnerability. High, CVSS 8.2, chance of use in 30 days 10%, known exploited since 15 March 2022. - [CVE-2014-4114](https://www.precursorintelligence.com/what-is/cve-2014-4114): Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 82%, known exploited since 3 March 2022. - [CVE-2013-3897](https://www.precursorintelligence.com/what-is/cve-2013-3897): Microsoft Internet Explorer Use-After-Free Vulnerability. High, CVSS 8.8, chance of use in 30 days 77%, known exploited since 3 March 2022. - [CVE-2015-2387](https://www.precursorintelligence.com/what-is/cve-2015-2387): Microsoft ATM Font Driver Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 35%, known exploited since 3 March 2022. - [CVE-2014-6352](https://www.precursorintelligence.com/what-is/cve-2014-6352): Microsoft Windows Code Injection Vulnerability. High, CVSS 7.8, chance of use in 30 days 77%, known exploited since 25 February 2022. - [CVE-2015-1635](https://www.precursorintelligence.com/what-is/cve-2015-1635): Microsoft HTTP.sys Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 10 February 2022. - [CVE-2014-1776](https://www.precursorintelligence.com/what-is/cve-2014-1776): Microsoft Internet Explorer Memory Corruption Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 83%, known exploited since 28 January 2022. - [CVE-2014-1812](https://www.precursorintelligence.com/what-is/cve-2014-1812): Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 65%, known exploited since 3 November 2021. ## Which Windows 8 flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2015-1635](https://www.precursorintelligence.com/what-is/cve-2015-1635): >99%, Critical (CVSS 9.8), known exploited - [CVE-2015-0014](https://www.precursorintelligence.com/what-is/cve-2015-0014): 97%, Critical (CVSS 10.0) - [CVE-2014-6321](https://www.precursorintelligence.com/what-is/cve-2014-6321): 96%, Critical (CVSS 10.0) - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): 95%, Critical (CVSS 9.8), known exploited - [CVE-2014-6332](https://www.precursorintelligence.com/what-is/cve-2014-6332): 95%, High (CVSS 8.8), known exploited - [CVE-2015-5122](https://www.precursorintelligence.com/what-is/cve-2015-5122): 94%, Critical (CVSS 9.8), known exploited - [CVE-2014-0569](https://www.precursorintelligence.com/what-is/cve-2014-0569): 91%, Critical (CVSS 9.3) - [CVE-2014-6324](https://www.precursorintelligence.com/what-is/cve-2014-6324): 87%, High (CVSS 8.8), known exploited - [CVE-2014-4113](https://www.precursorintelligence.com/what-is/cve-2014-4113): 87%, High (CVSS 7.8), known exploited - [CVE-2015-2426](https://www.precursorintelligence.com/what-is/cve-2015-2426): 87%, High (CVSS 8.8), known exploited ## Questions ### How many vulnerabilities does Windows 8 have? We track 324 published vulnerabilities listed under the name Windows 8, across 1 version. The most recent Windows 8 flaw added to the known-exploited list is CVE-2013-3918, on 6 October 2025. ### Which Windows 8 vulnerabilities are being exploited? 32 are on the list of flaws known to be exploited. The most recently added are CVE-2013-3918, CVE-2013-3163 and CVE-2012-1889. ### How do I get alerts for Windows 8? Create a Precursor Intelligence account and track Windows 8. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Windows 8? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact