Vulnerabilities

TI-2015-02123 CVE-2015-2417 · GHSA-39q6-796g-7fpx

OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…

LOW 35

OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10093 Published 2015-07-14 No fix listed CWE-20

TI-2015-02122 CVE-2015-2416 · GHSA-2748-85gq-qxvq

OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…

LOW 35

OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.10093 Published 2015-07-14 No fix listed CWE-20

TI-2015-02088 CVE-2015-2371 · GHSA-mvwm-4jfh-22gx

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows…

LOW 34

The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.01536 Published 2015-07-14 No fix listed CWE-264

TI-2015-02087 CVE-2015-2370 · GHSA-wmv6-6vx5-3643

The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003…

LOW 38

The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.04013 Published 2015-07-14 No fix listed CWE-264

TI-2015-02084 CVE-2015-2367 · GHSA-rj23-ggvv-vhrv

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

LOW 17

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.03133 Published 2015-07-14 No fix listed CWE-200

TI-2015-02082 CVE-2015-2365 · GHSA-777v-jvx3-g93p

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

LOW 38

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Wi…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.03464 Published 2015-07-14 No fix listed CWE-264

TI-2015-02081 CVE-2015-2364 · GHSA-7j67-gxf2-xxpq

The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista…

LOW 35

The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold a…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01674 Published 2015-07-14 No fix listed CWE-264

TI-2015-02080 CVE-2015-2363 · GHSA-2w52-h5q8-4cwq

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

LOW 35

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT all…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01674 Published 2015-07-14 No fix listed CWE-264

TI-2015-02091 CVE-2015-2374 · GHSA-8fjg-gffq-pmpm

The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008…

LOW 24

The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication, which allows remo…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.04934 Published 2015-07-14 No fix listed CWE-200

TI-2015-02086 CVE-2015-2369 · GHSA-3r5c-h748-vjgc

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows…

MEDIUM 43

Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.09956 Published 2015-07-14 No fix listed

TI-2015-01586 CVE-2015-1768 · GHSA-m893-c4fg-85fc

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2…

LOW 36

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory C…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.02028 Published 2015-06-10 No fix listed CWE-119

TI-2015-01523 CVE-2015-1701 · GHSA-rq9p-fw9r-ppg4

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2…

CRITICAL 93KEV

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.55923 Published 2015-04-21 No fix listed

TI-2015-00069 CVE-2015-0075 · GHSA-ffww-78wq-5cf2

The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…

LOW 35

The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01636 Published 2015-03-11 No fix listed CWE-264

TI-2015-00005 CVE-2015-0005 · GHSA-x38p-wh5w-wmgx

The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2…

LOW 38

The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Domain Controller is configured, allows remote attackers to spoof the computer na…

CVSS 2.0MEDIUM 4.3 Adjacent network No auth Interaction — EPSS 0.18604 Published 2015-03-11 No fix listed CWE-254

TI-2013-04422 CVE-2013-5065 · GHSA-gmpw-376j-24w5

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows…

CRITICAL 93KEV

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.34651 Published 2013-11-27 No fix listed

TI-2013-03376 CVE-2013-3866 · GHSA-qvrw-996v-rhj2