WV
Product
Windows Vista
On CISA KEVExploited in the wildRansomware-linked
827
CVEs
38
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 202Medium 66Low 6
Watch
Add Windows Vista to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-4250 In wildKEV | 9.8 | Oct 23 | Microsoft Windows Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2016-7256 In wildKEV | 8.8 | Nov 10 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2426 In wildKEV | 8.8 | Jul 20 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2360 In wildKEV | 8.8 | Jun 10 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6332 In wildKEV | 8.8 | Nov 11 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4148 In wildKEV | 8.8 | Oct 15 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-1812 RansomwareIn wildKEV | 8.8 | May 14 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3918 In wildKEV | 8.8 | Nov 12 | Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2011-3402 In wildKEV | 8.8 | Nov 4 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2546 RansomwareIn wildKEV | 8.2 | Sep 9 | Microsoft Win32k Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2017-0199 RansomwareIn wildKEV | 7.8 | Apr 12 | Microsoft Office and WordPad Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0005 In wildKEV | 7.8 | Mar 17 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0101 RansomwareIn wildKEV | 7.8 | Mar 17 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0001 In wildKEV | 7.8 | Mar 17 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-7255 RansomwareIn wildKEV | 7.8 | Nov 10 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-3393 In wildKEV | 7.8 | Oct 14 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-3309 RansomwareIn wildKEV | 7.8 | Aug 9 | Microsoft Windows Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0185 In wildKEV | 7.8 | May 11 | Microsoft Windows Media Center Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-0165 In wildKEV | 7.8 | Apr 12 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0167 RansomwareIn wildKEV | 7.8 | Apr 12 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0099 RansomwareIn wildKEV | 7.8 | Mar 9 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0040 In wildKEV | 7.8 | Feb 10 | Microsoft Windows Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-2387 In wildKEV | 7.8 | Jul 14 | Microsoft ATM Font Driver Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-1701 RansomwareIn wildKEV | 7.8 | Apr 21 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-0016 In wildKEV | 7.8 | Jan 13 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2014-4077 In wildKEV | 7.8 | Nov 11 | Microsoft IME Japanese Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6352 In wildKEV | 7.8 | Oct 22 | Microsoft Windows Code Injection Vulnerability Affected: All versions, or not specified |
| CVE-2014-4113 In wildKEV | 7.8 | Oct 15 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-4114 In wildKEV | 7.8 | Oct 15 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2013-3906 In wildKEV | 7.8 | Nov 6 | Microsoft Graphics Component Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2013-3660 In wildKEV | 7.8 | May 24 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2012-0151 In wildKEV | 7.8 | Apr 10 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2010-4398 In wildKEV | 7.8 | Dec 3 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2010-2568 In wildKEV | 7.8 | Jul 22 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2009-1123 In wildKEV | 7.8 | Jun 10 | Microsoft Windows Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0147 RansomwareIn wildKEV | 7.5 | Mar 17 | Microsoft Windows SMBv1 Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2015-1769 In wildKEV | 6.6 | Aug 15 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-3298 In wildKEV | 6.5 | Oct 14 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2016-7182 | 9.8 | Oct 14 | The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: All versions, or not specified |
| CVE-2016-3236 | 9.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified |
| CVE-2011-2013 | 9.8 | Nov 8 | Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2011-0657 | 9.8 | Apr 13 | DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7… Affected: All versions, or not specified |
| CVE-2009-2512 | 9.8 | Nov 11 | The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows… Affected: All versions, or not specified |
| CVE-2009-2494 | 9.8 | Aug 12 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4835 | 9.8 | Jan 14 | SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-3465 | 9.8 | Dec 10 | Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent… Affected: gold |
| CVE-2017-0090 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0089 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0088 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0087 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)