Windows Vista vulnerabilities | LiveThreat CVE Feed

Product

Windows Vista

by Microsoft · last CVE Feb 20, 2020

On CISA KEVExploited in the wildRansomware-linked

827

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities827 In the news5 Timeline

Severity mix

Critical 9High 202Medium 66Low 6

Severity

All severities500 Critical9 High202 Medium66 Low6

Exploitation

On CISA KEV38 Exploited in the wild38

Watch

Add Windows Vista to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2008-4250 In wildKEV	9.8	99%	Oct 23	Microsoft Windows Buffer Overflow Vulnerability Affected: All versions, or not specified
CVE-2016-7182	9.8	30%	Oct 14	The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: All versions, or not specified
CVE-2016-3236	9.8	77%	Jun 16	The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified
CVE-2011-2013	9.8	32%	Nov 8	Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to… Affected: All versions, or not specified
CVE-2011-0657	9.8	62%	Apr 13	DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7… Affected: All versions, or not specified
CVE-2009-2512	9.8	31%	Nov 11	The Web Services on Devices API (WSDAPI) in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows… Affected: All versions, or not specified
CVE-2009-2494	9.8	42%	Aug 12	The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to… Affected: All versions, or not specified
CVE-2008-4835	9.8	45%	Jan 14	SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified
CVE-2008-3465	9.8	14%	Dec 10	Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent… Affected: gold