Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

455 records in Windows Server 2003 · all components

Priority CRITICAL 100KEV

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98751 Published 2008-10-23 No fix listed CWE-119
Priority CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1484 Published 2015-06-10 No fix listed CWE-416
Priority CRITICAL 97KEV

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.94918 Published 2014-11-11 No fix listed CWE-119
Priority CRITICAL 97KEV

The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows re…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.87335 Published 2014-11-18 No fix listed
Priority CRITICAL 97KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5985 Published 2014-10-15 No fix listed CWE-94
Priority CRITICAL 97KEV

The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.73693 Published 2013-11-12 No fix listed CWE-787
Priority CRITICAL 97KEV

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.78138 Published 2011-11-04 No fix listed
Priority CRITICAL 97KEV

Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.5108 Published 2009-05-29 No fix listed CWE-158
Priority CRITICAL 93KEV

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.34878 Published 2015-07-14 No fix listed CWE-787
Priority CRITICAL 93KEV

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.86648 Published 2014-10-15 No fix listed
Priority CRITICAL 93KEV

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.39318 Published 2013-05-24 No fix listed CWE-119
Priority CRITICAL 93KEV

The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Pr…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.87658 Published 2012-04-10 No fix listed CWE-20
Priority CRITICAL 93KEV

Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08661 Published 2010-12-03 No fix listed CWE-787
Priority CRITICAL 87

Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.96893 Published 2015-01-13 No fix listed CWE-119
Priority CRITICAL 87

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote atta…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.95988 Published 2014-11-11 No fix listed CWE-94
Priority HIGH 79

Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.65624 Published 2012-08-15 No fix listed CWE-134
Load more
Open these records in search →