# Windows Rt 8.1 vulnerabilities > Windows Rt 8.1 is made by Microsoft. We track 2,336 published vulnerabilities in it, across 1 version. 131 of them are on the list of flaws known to be exploited, the newest added on 6 October 2025. If you run Windows Rt 8.1, check your version against the exploited flaws below and patch those first. Canonical page: https://www.precursorintelligence.com/product/microsoft/windows_rt_8.1 ## At a glance - **Made by:** [Microsoft](https://www.precursorintelligence.com/vendors/microsoft) - **Published vulnerabilities:** 2,336 - **Known to be exploited:** 131 - **Versions tracked:** 1 - **Most recently added to the known-exploited list:** [CVE-2013-3918](https://www.precursorintelligence.com/what-is/cve-2013-3918), 6 October 2025. We keep watching the list. ## Which Windows Rt 8.1 vulnerabilities are being exploited? 50 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2013-3918](https://www.precursorintelligence.com/what-is/cve-2013-3918): Microsoft Windows Out-of-Bounds Write Vulnerability. High, CVSS 8.8, chance of use in 30 days 74%, known exploited since 6 October 2025. - [CVE-2021-43226](https://www.precursorintelligence.com/what-is/cve-2021-43226): Microsoft Windows Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 3.3%, known exploited since 6 October 2025. - [CVE-2018-8639](https://www.precursorintelligence.com/what-is/cve-2018-8639): Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability. High, CVSS 7.8, chance of use in 30 days 22%, known exploited since 3 March 2025. - [CVE-2018-0824](https://www.precursorintelligence.com/what-is/cve-2018-0824): Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability. High, CVSS 8.8, chance of use in 30 days 73%, known exploited since 5 August 2024. - [CVE-2022-38028](https://www.precursorintelligence.com/what-is/cve-2022-38028): Microsoft Windows Print Spooler Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 15%, known exploited since 23 April 2024. - [CVE-2016-0165](https://www.precursorintelligence.com/what-is/cve-2016-0165): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 14%, known exploited since 22 June 2023. - [CVE-2019-1388](https://www.precursorintelligence.com/what-is/cve-2019-1388): Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 8.6%, known exploited since 7 April 2023. - [CVE-2023-21674](https://www.precursorintelligence.com/what-is/cve-2023-21674): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 41%, known exploited since 10 January 2023. - [CVE-2022-41033](https://www.precursorintelligence.com/what-is/cve-2022-41033): Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.9%, known exploited since 11 October 2022. - [CVE-2022-37969](https://www.precursorintelligence.com/what-is/cve-2022-37969): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 28%, known exploited since 14 September 2022. - [CVE-2022-26923](https://www.precursorintelligence.com/what-is/cve-2022-26923): Microsoft Active Directory Domain Services Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 84%, known exploited since 18 August 2022. - [CVE-2022-34713](https://www.precursorintelligence.com/what-is/cve-2022-34713): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 68%, known exploited since 9 August 2022. - [CVE-2022-22047](https://www.precursorintelligence.com/what-is/cve-2022-22047): Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 19%, known exploited since 12 July 2022. - [CVE-2022-26925](https://www.precursorintelligence.com/what-is/cve-2022-26925): Microsoft Windows LSA Spoofing Vulnerability. High, CVSS 8.1, chance of use in 30 days 10%, known exploited since 1 July 2022. - [CVE-2022-30190](https://www.precursorintelligence.com/what-is/cve-2022-30190): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days >99%, known exploited since 14 June 2022. - [CVE-2014-2817](https://www.precursorintelligence.com/what-is/cve-2014-2817): Microsoft Internet Explorer Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 26%, known exploited since 25 May 2022. - [CVE-2015-0071](https://www.precursorintelligence.com/what-is/cve-2015-0071): Microsoft Internet Explorer ASLR Bypass Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 34%, known exploited since 25 May 2022. - [CVE-2015-0016](https://www.precursorintelligence.com/what-is/cve-2015-0016): Microsoft Windows TS WebProxy Directory Traversal Vulnerability. High, CVSS 7.8, chance of use in 30 days 76%, known exploited since 25 May 2022. - [CVE-2016-7256](https://www.precursorintelligence.com/what-is/cve-2016-7256): Microsoft Windows Open Type Font Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 65%, known exploited since 25 May 2022. - [CVE-2015-2425](https://www.precursorintelligence.com/what-is/cve-2015-2425): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 45%, known exploited since 25 May 2022. - [CVE-2014-4148](https://www.precursorintelligence.com/what-is/cve-2014-4148): Microsoft Windows Remote Code Execution Vulnerability. High, CVSS 8.8, chance of use in 30 days 60%, known exploited since 25 May 2022. - [CVE-2014-4123](https://www.precursorintelligence.com/what-is/cve-2014-4123): Microsoft Internet Explorer Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 47%, known exploited since 25 May 2022. - [CVE-2015-2360](https://www.precursorintelligence.com/what-is/cve-2015-2360): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 15%, known exploited since 25 May 2022. - [CVE-2015-1769](https://www.precursorintelligence.com/what-is/cve-2015-1769): Microsoft Windows Mount Manager Privilege Escalation Vulnerability. Medium, CVSS 6.6, chance of use in 30 days 4.1%, known exploited since 25 May 2022. - [CVE-2016-3393](https://www.precursorintelligence.com/what-is/cve-2016-3393): Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability. High, CVSS 7.8, chance of use in 30 days 68%, known exploited since 25 May 2022. - [CVE-2013-7331](https://www.precursorintelligence.com/what-is/cve-2013-7331): Microsoft Internet Explorer Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 50%, known exploited since 25 May 2022. - [CVE-2016-3298](https://www.precursorintelligence.com/what-is/cve-2016-3298): Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 33%, known exploited since 24 May 2022. - [CVE-2016-0162](https://www.precursorintelligence.com/what-is/cve-2016-0162): Microsoft Internet Explorer Information Disclosure Vulnerability. Medium, CVSS 4.3, chance of use in 30 days 22%, known exploited since 24 May 2022. - [CVE-2018-8611](https://www.precursorintelligence.com/what-is/cve-2018-8611): Microsoft Windows Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.2%, known exploited since 24 May 2022. - [CVE-2017-0210](https://www.precursorintelligence.com/what-is/cve-2017-0210): Microsoft Internet Explorer Privilege Escalation Vulnerability. High, CVSS 8.8, chance of use in 30 days 22%, known exploited since 24 May 2022. - [CVE-2017-0149](https://www.precursorintelligence.com/what-is/cve-2017-0149): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 29%, known exploited since 24 May 2022. - [CVE-2017-0147](https://www.precursorintelligence.com/what-is/cve-2017-0147): Microsoft Windows SMBv1 Information Disclosure Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 24 May 2022. - [CVE-2017-8543](https://www.precursorintelligence.com/what-is/cve-2017-8543): Microsoft Windows Search Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 74%, known exploited since 24 May 2022. - [CVE-2017-0022](https://www.precursorintelligence.com/what-is/cve-2017-0022): Microsoft XML Core Services Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 18%, known exploited since 24 May 2022. - [CVE-2017-0005](https://www.precursorintelligence.com/what-is/cve-2017-0005): Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 11%, known exploited since 24 May 2022. - [CVE-2016-3351](https://www.precursorintelligence.com/what-is/cve-2016-3351): Microsoft Internet Explorer and Edge Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 26%, known exploited since 24 May 2022. - [CVE-2020-1027](https://www.precursorintelligence.com/what-is/cve-2020-1027): Microsoft Windows Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 4.5%, known exploited since 23 May 2022. - [CVE-2019-0880](https://www.precursorintelligence.com/what-is/cve-2019-0880): Microsoft Windows Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 2.3%, known exploited since 23 May 2022. - [CVE-2019-0676](https://www.precursorintelligence.com/what-is/cve-2019-0676): Microsoft Internet Explorer Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 8.1%, known exploited since 23 May 2022. - [CVE-2019-0703](https://www.precursorintelligence.com/what-is/cve-2019-0703): Microsoft Windows SMB Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 9.6%, known exploited since 23 May 2022. - [CVE-2019-1130](https://www.precursorintelligence.com/what-is/cve-2019-1130): Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 1.7%, known exploited since 23 May 2022. - [CVE-2014-4113](https://www.precursorintelligence.com/what-is/cve-2014-4113): Microsoft Win32k Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 87%, known exploited since 4 May 2022. - [CVE-2022-26904](https://www.precursorintelligence.com/what-is/cve-2022-26904): Microsoft Windows User Profile Service Privilege Escalation Vulnerability. High, CVSS 7.0, chance of use in 30 days 17%, known exploited since 25 April 2022. - [CVE-2022-21919](https://www.precursorintelligence.com/what-is/cve-2022-21919): Microsoft Windows User Profile Service Privilege Escalation Vulnerability. High, CVSS 7.0, chance of use in 30 days 2.4%, known exploited since 25 April 2022. - [CVE-2022-22718](https://www.precursorintelligence.com/what-is/cve-2022-22718): Microsoft Windows Print Spooler Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 18%, known exploited since 19 April 2022. - [CVE-2015-0311](https://www.precursorintelligence.com/what-is/cve-2015-0311): Adobe Flash Player Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 86%, known exploited since 13 April 2022. - [CVE-2015-2502](https://www.precursorintelligence.com/what-is/cve-2015-2502): Microsoft Internet Explorer Memory Corruption Vulnerability. High, CVSS 8.8, chance of use in 30 days 51%, known exploited since 13 April 2022. - [CVE-2022-24521](https://www.precursorintelligence.com/what-is/cve-2022-24521): Microsoft Windows CLFS Driver Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 7.1%, known exploited since 13 April 2022. - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): Adobe Flash Player Use-After-Free Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 13 April 2022. - [CVE-2017-0148](https://www.precursorintelligence.com/what-is/cve-2017-0148): Microsoft SMBv1 Server Remote Code Execution Vulnerability. High, CVSS 8.1, chance of use in 30 days >99%, known exploited since 6 April 2022. ## Which Windows Rt 8.1 flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2017-0147](https://www.precursorintelligence.com/what-is/cve-2017-0147): >99%, High (CVSS 7.5), known exploited - [CVE-2017-0148](https://www.precursorintelligence.com/what-is/cve-2017-0148): >99%, High (CVSS 8.1), known exploited - [CVE-2017-0144](https://www.precursorintelligence.com/what-is/cve-2017-0144): >99%, High (CVSS 8.8), known exploited - [CVE-2014-6321](https://www.precursorintelligence.com/what-is/cve-2014-6321): 96%, Critical (CVSS 10.0) - [CVE-2015-0313](https://www.precursorintelligence.com/what-is/cve-2015-0313): 95%, Critical (CVSS 9.8), known exploited - [CVE-2014-6332](https://www.precursorintelligence.com/what-is/cve-2014-6332): 95%, High (CVSS 8.8), known exploited - [CVE-2016-0189](https://www.precursorintelligence.com/what-is/cve-2016-0189): 94%, High (CVSS 7.5), known exploited - [CVE-2017-0143](https://www.precursorintelligence.com/what-is/cve-2017-0143): 93%, High (CVSS 8.8), known exploited - [CVE-2017-8464](https://www.precursorintelligence.com/what-is/cve-2017-8464): 90%, High (CVSS 8.8), known exploited - [CVE-2017-0146](https://www.precursorintelligence.com/what-is/cve-2017-0146): 90%, High (CVSS 8.8), known exploited ## Questions ### How many vulnerabilities does Windows Rt 8.1 have? We track 2,336 published vulnerabilities listed under the name Windows Rt 8.1, across 1 version. The most recent Windows Rt 8.1 flaw added to the known-exploited list is CVE-2013-3918, on 6 October 2025. ### Which Windows Rt 8.1 vulnerabilities are being exploited? 131 are on the list of flaws known to be exploited. The most recently added are CVE-2013-3918, CVE-2021-43226 and CVE-2018-8639. ### How do I get alerts for Windows Rt 8.1? Create a Precursor Intelligence account and track Windows Rt 8.1. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Windows Rt 8.1? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact