VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

17,661 guide candidatesPage 1437 of 1472
Known exploitedHighResearch in progress
CVE-2018-8453

Microsoft Win32k

Affected
32-bit Systems Service Pack 1, x64-based Systems Service Pack 1, (Server Core installation), Windows RT 8.1, 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation), 32-bit systems, x64-based systems, Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation), Version 1607 for 32-bit Systems, Version 1607 for x64-based Systems, Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems
Fixed
No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2018-14634

Linux Kernel

Affected
2.6.x, 3.10.x, 4.14.x, >= 7.1.0 < 7.1.23, >= 8.0.0 < 8.0.16, >= 8.1.0 < 8.1.7, >= 11.2.1 < 11.6.4, >= 12.1.0 < 12.1.5, >= 13.0.0 < 13.1.1.5, >= 14.0.0 < 14.0.1.1, >= 14.1.0 < 14.1.0.6, >= 5.0.0 <= 5.4.0, >= 6.0.0 <= 6.0.1, >= 7.0.0 <= 7.1.0, 4.6.0, 1.0.0, 3.1.1, >= 2.2.0 <= 2.3.0, >= 5.0.0 <= 5.1.0, 4.4.0, >= 2.6.0 <= 2.6.39.4, >= 3.10 <= 3.10.102
Fixed
7.1.23, 8.0.16, 8.1.7, 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
Known exploitedCriticalResearch in progress
CVE-2018-15961

Adobe ColdFusion

Affected
July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions, 11.0, 2016, 2018
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8440

Microsoft Windows

Affected
32-bit Systems Service Pack 1, x64-based Systems Service Pack 1, (Server Core installation), Windows RT 8.1, 32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation), 32-bit systems, x64-based systems, Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation), Version 1607 for 32-bit Systems, Version 1607 for x64-based Systems, Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems
Fixed
No verified fixed-version field is available yet
Known exploitedHighFixed-version data
CVE-2018-11776

Apache Struts

Affected
2.3 to 2.3.34, 2.5 to 2.5.16, >= 2.0.4 < 2.3.35, >= 2.5.0 < 2.5.17, >= 7.3, >= 9.5, < 12.5.0, 13.3.0.0, 13.4.0.0, <= 3.4.9.4237, >= 4.0.0 <= 4.0.6.5281, >= 8.0.0 <= 8.0.2.8191
Fixed
2.3.35, 2.5.17, 12.5.0
Review reviewHighResearch in progress
CVE-2018-10902

Linux Linux, debian linux, ubuntu linux

Affected
8.0, 9.0, 12.04, 14.04, 16.04, 18.04, 6.0, 7.0
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8414

Microsoft Windows

Affected
version 1709 (Server Core Installation), version 1803 (Server Core Installation), Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems, Version 1803 for 32-bit Systems, Version 1803 for x64-based Systems
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8406

Microsoft DirectX Graphics Kernel (DXGKRNL)

Affected
(Server Core installation), 32-bit Systems, Version 1607 for 32-bit Systems, Version 1607 for x64-based Systems, Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems, Version 1803 for 32-bit Systems, Version 1803 for x64-based Systems, x64-based Systems, version 1709 (Server Core Installation), version 1803 (Server Core Installation)
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8405

Microsoft DirectX Graphics Kernel (DXGKRNL)

Affected
(Server Core installation), Windows RT 8.1, 32-bit systems, x64-based systems, Version 1607 for 32-bit Systems, Version 1607 for x64-based Systems, Version 1703 for 32-bit Systems, Version 1703 for x64-based Systems, Version 1709 for 32-bit Systems, Version 1709 for x64-based Systems, Version 1803 for 32-bit Systems, Version 1803 for x64-based Systems, version 1709 (Server Core Installation), version 1803 (Server Core Installation), r2
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-8373

Microsoft Internet Explorer Scripting Engine

Affected
Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2, Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, Windows 10 Version 1703 for x64-based Systems, Windows 10 Version 1709 for 32-bit Systems, Windows 10 Version 1709 for x64-based Systems, Windows 10 Version 1803 for 32-bit Systems, Windows 10 Version 1803 for x64-based Systems, Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2012 R2, Windows Server 2016
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-15133

Laravel Laravel Framework

Affected
<= 5.5.40, >= 5.6.0 <= 5.6.29
Fixed
No verified fixed-version field is available yet
Known exploitedCriticalResearch in progress
CVE-2018-14933

NUUO NVRmini Devices

Affected
2016
Fixed
No verified fixed-version field is available yet