Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

514 records in Windows 2000 · all components

Priority CRITICAL 100KEV

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98751 Published 2008-10-23 No fix listed CWE-119
Priority CRITICAL 97KEV

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5108 Published 2009-05-29 No fix listed CWE-158
Priority CRITICAL 93KEV

The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.28735 Published 2010-01-21 No fix listed
Priority CRITICAL 93KEV

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a han…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04919 Published 2003-04-02 No fix listed CWE-269
Priority HIGH 82

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary c…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.77664 Published 2007-04-13 No fix listed CWE-119
Priority HIGH 80

The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that tri…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.80544 Published 2010-03-31 No fix listed CWE-94
Priority HIGH 78

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.44925 Published 2009-01-14 No fix listed CWE-94
Priority HIGH 77

Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to exec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.67888 Published 2010-04-14 No fix listed CWE-119
Priority HIGH 77

The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors relat…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.42329 Published 2009-08-12 No fix listed CWE-94
Load more
Open these records in search →