Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9
Exploited now
Microsoft records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04003 · Published 2021-12-15 · Fixed in 0.63.11
Priority MEDIUM 41
Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0072 · Published 2025-11-11 · Fixed in 2.6.2 CWE-122
Priority LOW 37
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.005 · Published 2022-12-13 · Fixed in 10.0.17763.3770, 10.0.19043.2364 +7 CWE-269
Priority LOW 36
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00333 · Published 2026-07-14 · Fixed in 2.7.8 CWE-126
Priority LOW 33
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.0038 · Published 2022-11-09 · Fixed in 1.4.2.12122 LTS, 5.15.62.1 CWE-362
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2026-10-13 · Fixed in 2.7.10 CWE-367
Priority LOW 32
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2025-08-12 · Fixed in 2.5.10 CWE-367
Priority LOW 29
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0044 · Published 2026-10-13 · Fixed in 3.0.1 CWE-908
Priority LOW 29
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2026-07-14 · Fixed in 2.7.10 CWE-367
Open these records in search →