WV
Product
Windows Vista
On CISA KEVExploited in the wildRansomware-linked
827
CVEs
38
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 202Medium 66Low 6
Watch
Add Windows Vista to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1769 In wildKEV | 6.6 | Aug 15 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2016-3298 In wildKEV | 6.5 | Oct 14 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Affected: All versions, or not specified |
| CVE-2016-0128 | 6.8 | Apr 12 | The SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Affected: All versions, or not specified |
| CVE-2016-0133 | 6.8 | Mar 9 | The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Affected: All versions, or not specified |
| CVE-2016-3372 | 6.6 | Sep 14 | The kernel API in Microsoft Windows Vista SP2 and Windows Server 2008 SP2 does not properly enforce permissions, which allows local users to spoof processes, spoof inter-process… Affected: All versions, or not specified |
| CVE-2017-0063 | 6.5 | Mar 17 | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP1; Windows 8.1; Windows Server 2012… Affected: All versions, or not specified |
| CVE-2016-7257 | 6.5 | Dec 20 | The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain… Affected: All versions, or not specified |
| CVE-2016-7237 | 6.5 | Nov 10 | Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Affected: All versions, or not specified |
| CVE-2016-7210 | 6.5 | Nov 10 | atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
| CVE-2016-0169 | 6.5 | May 11 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0168 | 6.5 | May 11 | GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511… Affected: All versions, or not specified |
| CVE-2016-0120 | 6.5 | Mar 9 | The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and… Affected: All versions, or not specified |
| CVE-2010-0488 | 6.5 | Mar 31 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and… Affected: All versions, or not specified |
| CVE-2016-0049 | 6.2 | Feb 10 | Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not… Affected: All versions, or not specified |
| CVE-2017-0055 | 6.1 | Mar 17 | Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1;… Affected: All versions, or not specified |
| CVE-2011-0096 | 6.1 | Jan 31 | The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7… Affected: All versions, or not specified |
| CVE-2010-0021 | 5.9 | Feb 10 | Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow… Affected: All versions, or not specified |
| CVE-2018-7250 | 5.5 | Feb 26 | An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc Affected: All versions, or not specified |
| CVE-2017-0060 | 5.5 | Mar 17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: All versions, or not specified |
| CVE-2017-0045 | 5.5 | Mar 17 | Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse crafted .msdvd files, which allows attackers to obtain… Affected: All versions, or not specified |
| CVE-2017-0038 | 5.5 | Feb 20 | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,… Affected: All versions, or not specified |
| CVE-2016-7295 | 5.5 | Dec 20 | The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Affected: All versions, or not specified |
| CVE-2016-7219 | 5.5 | Dec 20 | The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2016-7216 | 5.5 | Nov 10 | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permissions, which allows local users to gain privileges via a… Affected: All versions, or not specified |
| CVE-2016-3263 | 5.5 | Oct 14 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: All versions, or not specified |
| CVE-2016-3262 | 5.5 | Oct 14 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: All versions, or not specified |
| CVE-2016-3209 | 5.5 | Oct 14 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: All versions, or not specified |
| CVE-2016-0070 | 5.5 | Oct 14 | The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold,… Affected: All versions, or not specified |
| CVE-2016-3373 | 5.5 | Sep 14 | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2016-3371 | 5.5 | Sep 14 | The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10… Affected: All versions, or not specified |
| CVE-2010-0481 | 5.5 | Apr 14 | The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its… Affected: All versions, or not specified |
| CVE-2008-3893 | 5.5 | Sep 3 | Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local… Affected: All versions, or not specified |
| CVE-2017-0099 | 5.4 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and… Affected: All versions, or not specified |
| CVE-2017-0097 | 5.4 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server… Affected: All versions, or not specified |
| CVE-2017-0076 | 5.4 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server… Affected: All versions, or not specified |
| CVE-2017-0074 | 5.4 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server… Affected: All versions, or not specified |
| CVE-2017-0061 | 5.3 | Mar 17 | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP1 allows remote attackers to bypass… Affected: All versions, or not specified |
| CVE-2016-3299 | 5.3 | Aug 9 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow… Affected: All versions, or not specified |
| CVE-2017-0058 | 4.7 | Apr 12 | A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information Affected: All versions, or not specified |
| CVE-2017-0062 | 4.7 | Mar 17 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: All versions, or not specified |
| CVE-2016-7218 | 4.7 | Nov 10 | Bowser.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: All versions, or not specified |
| CVE-2017-0192 | 4.3 | Apr 12 | The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: All versions, or not specified |
| CVE-2017-0128 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0127 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0126 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0125 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0124 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0123 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0122 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a… Affected: All versions, or not specified |
| CVE-2017-0121 | 4.3 | Mar 17 | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)