Microsoft

Windows Xp

738 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2008-1084

Exploit
  • EPSS 6.75%
  • Veröffentlicht 08.04.2008 23:05:00
  • Zuletzt bearbeitet 16.06.2026 22:50:57

Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary code via unknown vectors related to improper input validation. NOTE: i...

9.3

CVE-2008-1086

  • EPSS 30.54%
  • Veröffentlicht 08.04.2008 23:05:00
  • Zuletzt bearbeitet 16.06.2026 22:50:57

The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, wh...

9.3

CVE-2008-1087

  • EPSS 56.6%
  • Veröffentlicht 08.04.2008 23:05:00
  • Zuletzt bearbeitet 16.06.2026 22:50:57

Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflo...

6.8

CVE-2008-0088

  • EPSS 28.95%
  • Veröffentlicht 12.02.2008 21:00:00
  • Zuletzt bearbeitet 16.06.2026 22:48:55

Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted...

7.1

CVE-2007-0066

  • EPSS 31.53%
  • Veröffentlicht 08.01.2008 20:46:00
  • Zuletzt bearbeitet 16.06.2026 22:34:50

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via fragmented router advertisement ICMP packets that trigger an out-of-boun...

9.3

CVE-2007-0069

  • EPSS 49.21%
  • Veröffentlicht 08.01.2008 20:46:00
  • Zuletzt bearbeitet 16.06.2026 22:34:51

Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via crafted (1) IGMPv3 and (2) MLDv2 packets that t...

7.2

CVE-2007-5352

  • EPSS 2.57%
  • Veröffentlicht 08.01.2008 20:46:00
  • Zuletzt bearbeitet 16.06.2026 22:45:57

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.

9.3

CVE-2007-6026

  • EPSS 28.27%
  • Veröffentlicht 20.11.2007 00:46:00
  • Zuletzt bearbeitet 16.06.2026 22:47:17

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing ...

9.3

CVE-2007-3751

  • EPSS 25.66%
  • Veröffentlicht 07.11.2007 23:46:00
  • Zuletzt bearbeitet 16.06.2026 22:42:39

Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untrusted Java applets that gain privileges via unspecified vectors.

9.3

CVE-2007-4675

  • EPSS 32.8%
  • Veröffentlicht 07.11.2007 23:46:00
  • Zuletzt bearbeitet 16.06.2026 22:44:33

Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the...