Microsoft Virtual Machine vulnerabilities

10 CVEs affecting Microsoft Virtual Machine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0111, published 2003-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-0866, published 2002-10-11. High severity, CVSS 7.5. EPSS: 41.4% chance of exploitation in the next 30 days. Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet…
CVE-2003-0111, published 2003-05-05. High severity, CVSS 7.5. EPSS: 36.7% chance of exploitation in the next 30 days. The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute…
CVE-2000-0711, published 2000-10-20. High severity, CVSS 7.5. EPSS: 33.5% chance of exploitation in the next 30 days. Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious…
CVE-2002-0867, published 2002-10-11. Medium severity, CVSS 5.0. EPSS: 27.3% chance of exploitation in the next 30 days. Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka…
CVE-2002-0076, published 2002-03-19. High severity, CVSS 7.5. EPSS: 26.9% chance of exploitation in the next 30 days. Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft…
CVE-2002-0865, published 2002-10-11. High severity, CVSS 7.5. EPSS: 19.8% chance of exploitation in the next 30 days. A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows…
CVE-2000-0132, published 2000-01-31. Low severity, CVSS 2.6. EPSS: 19% chance of exploitation in the next 30 days. Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
CVE-2000-0327, published 1999-10-21. High severity, CVSS 7.6. EPSS: 11.8% chance of exploitation in the next 30 days. Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier"…
CVE-2002-0058, published 2002-03-15. Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days. Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the…
CVE-2002-0979, published 2002-09-24. High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days. The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to execute arbitrary code.