Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

404 records in Windows 2003 Server · all components

Priority CRITICAL 97KEV

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5108 Published 2009-05-29 No fix listed CWE-158
Priority CRITICAL 97KEV

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.76576 Published 2009-07-07 No fix listed CWE-121
Priority CRITICAL 93KEV

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.55923 Published 2015-04-21 No fix listed
Priority HIGH 82

Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary c…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.77664 Published 2007-04-13 No fix listed CWE-119
Priority HIGH 78

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass th…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.71148 Published 2010-06-14 No fix listed CWE-78
Priority HIGH 77

Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to exec…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.67888 Published 2010-04-14 No fix listed CWE-119
Priority HIGH 75

vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by refer…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.86634 Published 2010-03-03 No fix listed CWE-94
Load more
Open these records in search →