Priority CRITICAL 100KEV
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98751 · Published 2008-10-23 · No fix listed CWE-119
Priority CRITICAL 97KEV
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1484 · Published 2015-06-10 · No fix listed CWE-416
Priority CRITICAL 97KEV
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.94918 · Published 2014-11-11 · No fix listed CWE-119
Priority CRITICAL 97KEV
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows re…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.87335 · Published 2014-11-18 · No fix listed
Priority CRITICAL 97KEV
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.5985 · Published 2014-10-15 · No fix listed CWE-94
Priority CRITICAL 97KEV
The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.73693 · Published 2013-11-12 · No fix listed CWE-787
Priority CRITICAL 97KEV
Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.78138 · Published 2011-11-04 · No fix listed
Priority CRITICAL 97KEV
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.5108 · Published 2009-05-29 · No fix listed CWE-158
Priority CRITICAL 93KEV
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Win…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.34878 · Published 2015-07-14 · No fix listed CWE-787
Priority CRITICAL 93KEV
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Go…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.86648 · Published 2014-10-15 · No fix listed
Priority CRITICAL 93KEV
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandb…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.54577 · Published 2014-11-11 · No fix listed
Priority CRITICAL 93KEV
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.39318 · Published 2013-05-24 · No fix listed CWE-119
Priority CRITICAL 93KEV
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Pr…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.87658 · Published 2012-04-10 · No fix listed CWE-20
Priority CRITICAL 93KEV
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.31761 · Published 2011-10-12 · No fix listed
Priority CRITICAL 93KEV
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.08661 · Published 2010-12-03 · No fix listed CWE-787
Priority CRITICAL 93KEV
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF sho…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.89623 · Published 2010-07-22 · No fix listed
Priority CRITICAL 93KEV
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04878 · Published 2009-06-10 · No fix listed
Priority CRITICAL 87
Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.96893 · Published 2015-01-13 · No fix listed CWE-119
Priority CRITICAL 87
Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote atta…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.95988 · Published 2014-11-11 · No fix listed CWE-94
Priority HIGH 84
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DN…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.62495 · Published 2011-04-13 · No fix listed CWE-20
Priority HIGH 82
The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.7572 · Published 2010-08-11 · No fix listed CWE-20
Priority HIGH 80
Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 200…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.68084 · Published 2011-02-16 · No fix listed CWE-119
Priority HIGH 80
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrar…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.67822 · Published 2004-10-16 · No fix listed CWE-787
Priority HIGH 79
Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.65624 · Published 2012-08-15 · No fix listed CWE-134
Priority HIGH 79
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly proc…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.74989 · Published 2012-03-13 · No fix listed CWE-94
Load more