CVE-2007-1090: Microsoft Windows Explorer

High severity, CVSS 7.1. EPSS: 17.2% chance of exploitation in the next 30 days.

Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.

Affected products

• Microsoft Windows Explorer: any version

Published 2007-02-26. Last modified 2026-06-16.