W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-4250 In wildKEV | 9.8 | Oct 23 | Microsoft Windows Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2009-2494 | 9.8 | Aug 12 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4835 | 9.8 | Jan 14 | SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-3465 | 9.8 | Dec 10 | Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent… Affected: All versions, or not specified |
| CVE-2002-0391 | 9.8 | Aug 12 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to… Affected: All versions, or not specified |
| CVE-2000-1218 | 9.8 | Apr 14 | The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS… Affected: All versions, or not specified |
| CVE-1999-0511 | 9.1 | Jan 1 | IP forwarding is enabled on a machine which is not a router or firewall Affected: All versions, or not specified |
Showing 7
The 500 most important CVEs for this product (exploited first, then by severity)