WV
Product
Windows Vista
On CISA KEVExploited in the wildRansomware-linked
827
CVEs
38
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 202Medium 66Low 6
Watch
Add Windows Vista to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-7256 In wildKEV | 8.8 | Nov 10 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2426 In wildKEV | 8.8 | Jul 20 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2360 In wildKEV | 8.8 | Jun 10 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6332 In wildKEV | 8.8 | Nov 11 | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-4148 In wildKEV | 8.8 | Oct 15 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2014-1812 RansomwareIn wildKEV | 8.8 | May 14 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2013-3918 In wildKEV | 8.8 | Nov 12 | Microsoft Windows Out-of-Bounds Write Vulnerability Affected: All versions, or not specified |
| CVE-2011-3402 In wildKEV | 8.8 | Nov 4 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2015-2546 RansomwareIn wildKEV | 8.2 | Sep 9 | Microsoft Win32k Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2017-0199 RansomwareIn wildKEV | 7.8 | Apr 12 | Microsoft Office and WordPad Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2017-0005 In wildKEV | 7.8 | Mar 17 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0101 RansomwareIn wildKEV | 7.8 | Mar 17 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0001 In wildKEV | 7.8 | Mar 17 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-7255 RansomwareIn wildKEV | 7.8 | Nov 10 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-3393 In wildKEV | 7.8 | Oct 14 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-3309 RansomwareIn wildKEV | 7.8 | Aug 9 | Microsoft Windows Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0185 In wildKEV | 7.8 | May 11 | Microsoft Windows Media Center Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-0165 In wildKEV | 7.8 | Apr 12 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0167 RansomwareIn wildKEV | 7.8 | Apr 12 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0099 RansomwareIn wildKEV | 7.8 | Mar 9 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-0040 In wildKEV | 7.8 | Feb 10 | Microsoft Windows Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-2387 In wildKEV | 7.8 | Jul 14 | Microsoft ATM Font Driver Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-1701 RansomwareIn wildKEV | 7.8 | Apr 21 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2015-0016 In wildKEV | 7.8 | Jan 13 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2014-4077 In wildKEV | 7.8 | Nov 11 | Microsoft IME Japanese Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-6352 In wildKEV | 7.8 | Oct 22 | Microsoft Windows Code Injection Vulnerability Affected: All versions, or not specified |
| CVE-2014-4113 In wildKEV | 7.8 | Oct 15 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2014-4114 In wildKEV | 7.8 | Oct 15 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2013-3906 In wildKEV | 7.8 | Nov 6 | Microsoft Graphics Component Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2013-3660 In wildKEV | 7.8 | May 24 | Microsoft Win32k Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2012-0151 In wildKEV | 7.8 | Apr 10 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2010-4398 In wildKEV | 7.8 | Dec 3 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Affected: All versions, or not specified |
| CVE-2010-2568 In wildKEV | 7.8 | Jul 22 | Microsoft Windows Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2009-1123 In wildKEV | 7.8 | Jun 10 | Microsoft Windows Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2017-0147 RansomwareIn wildKEV | 7.5 | Mar 17 | Microsoft Windows SMBv1 Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2017-0090 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0089 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0088 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0087 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0086 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0084 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2017-0083 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2017-0072 | 8.8 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-7274 | 8.8 | Dec 20 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2016-7272 | 8.8 | Dec 20 | The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10… Affected: All versions, or not specified |
| CVE-2016-3368 | 8.8 | Sep 14 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607… Affected: All versions, or not specified |
| CVE-2016-3345 | 8.8 | Sep 14 | The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-3213 | 8.8 | Jun 16 | The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… Affected: All versions, or not specified |
| CVE-2016-0195 | 8.8 | May 11 | The Imaging Component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows… Affected: All versions, or not specified |
| CVE-2016-0184 | 8.8 | May 11 | Use-after-free vulnerability in GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)