Browse CVEs

HIGH 7.2 CVE-2011-1984EPSS 7% WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over t… Windows 2003 Server Mitigation only Fix from $1,9502011-09-15 HIGH 7.2 CVE-2011-1967 Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, W… Windows 2003 Server Mitigation only Fix from $1,9502011-08-10 HIGH 7.2 CVE-2011-1974EPSS 7% NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly … Windows 2003 Server No fix yet Fix from $1,9502011-08-10 HIGH 7.2 CVE-2011-1249EPSS 8% The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Serve… Windows 2003 Server No fix yet Fix from $1,9502011-06-16 HIGH 7.7 CVE-2011-1271EPSS 20% The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle express… .net Framework No fix yet Fix from $1,9502011-05-10 HIGH 9.3 CVE-2011-0976EPSS 25% Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pac… Powerpoint Mitigation only Fix from $1,9502011-02-10 HIGH 9.3 CVE-2011-0980EPSS 26% Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art obje… Excel Mitigation only Fix from $1,9502011-02-10 HIGH 7.2 CVE-2010-3943 win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Go… Windows 2003 Server Mitigation only Fix from $1,9502010-12-16 HIGH 7.2 CVE-2010-2741 The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font p… Windows 2003 Server Mitigation only Fix from $1,9502010-10-13 HIGH 7.2 CVE-2010-2744 The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R… Windows 2003 Server No fix yet Fix from $1,9502010-10-13 HIGH 7.2 CVE-2010-2740 The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font… Windows 2003 Server Mitigation only Fix from $1,9502010-10-13 MEDIUM 6.8 CVE-2010-1886 Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users… Windows 2003 Server Patch available Fix from $1,6002010-08-16 HIGH 7.2 CVE-2010-1894 The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified ex… Windows 2003 Server Mitigation only Fix from $1,9502010-08-11 HIGH 7.2 CVE-2010-1895 The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory alloca… Windows 2003 Server Mitigation only Fix from $1,9502010-08-11 MEDIUM 6.9 CVE-2010-1254 The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to ex… Open Xml File Format Converter Mitigation only Fix from $1,6002010-06-08 MEDIUM 6.4 CVE-2010-0812EPSS 17% Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended I… Windows Xp Mitigation only Fix from $1,6002010-04-14 HIGH 9.3 CVE-2010-1225EPSS 28% The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server… Virtual Pc No fix yet Fix from $1,9502010-04-01 HIGH 10.0 CVE-2010-0231EPSS 41% The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1,… Windows 2000 Mitigation only Fix from $1,9502010-02-10 MEDIUM 6.9 CVE-2010-0023 The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes afte… Windows 2000 Mitigation only Fix from $1,6002010-02-10 HIGH 9.3 CVE-2009-0090EPSS 21% Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unint… Windows 2000 Mitigation only Fix from $1,9502009-10-14 HIGH 8.8 CVE-2009-2493EPSS 38% The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and… Visual C\+\+ Patch available Fix from $1,9502009-07-29 HIGH 9.0 CVE-2009-1135EPSS 26% Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, w… Isa Server Mitigation only Fix from $1,9502009-07-15 HIGH 9.0 CVE-2009-1542EPSS 8% The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CP… Virtual Pc Mitigation only Fix from $1,9502009-07-15 HIGH 10.0 CVE-2009-0568EPSS 32% The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 do… Windows 2000 Mitigation only Fix from $1,9502009-06-10 HIGH 9.0 CVE-2009-0230EPSS 35% The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote… Windows 2000 Mitigation only Fix from $1,9502009-06-10 MEDIUM 5.0 CVE-2009-0419EPSS 15% Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict a… Xml Core Services Mitigation only Fix from $1,6002009-02-04 HIGH 8.5 CVE-2008-4252EPSS 21% The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during acces… Office Frontpage Mitigation only Fix from $1,9502008-12-10 HIGH 7.2 CVE-2008-3464 afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly va… Windows 2003 Server Patch available Fix from $1,9502008-10-15 HIGH 7.1 CVE-2008-1448EPSS 27% The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Inter… Outlook Express Patch available Fix from $1,9502008-08-13 HIGH 9.0 CVE-2008-1436EPSS 37% Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalSer… Windows Nt No fix yet Fix from $1,9502008-04-21