WX
Product
Windows XP
by Microsoft · last CVE Feb 20, 2020
On CISA KEVExploited in the wild
738
CVEs
13
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 69Medium 5Low 0
Watch

Add Windows XP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-4250
In wildKEV
9.8
99%
Oct 23
Microsoft Windows Buffer Overflow Vulnerability
Affected: All versions, or not specified
CVE-2011-0657
9.8
62%
Apr 13
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7…
Affected: All versions, or not specified
CVE-2009-2494
9.8
42%
Aug 12
The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to…
Affected: All versions, or not specified
CVE-2008-4835
9.8
45%
Jan 14
SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary…
Affected: All versions, or not specified
CVE-2008-3465
9.8
14%
Dec 10
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent…
Affected: All versions, or not specified
CVE-2002-0391
9.8
58%
Aug 12
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
Affected: All versions, or not specified
CVE-2000-1218
9.8
6%
Apr 14
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
Affected: All versions, or not specified
Showing 7
The 500 most important CVEs for this product (exploited first, then by severity)