Microsoft Virtual Pc vulnerabilities

4 CVEs affecting Microsoft Virtual Pc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-1225, published 2010-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-1225, published 2010-04-01. High severity, CVSS 9.3. EPSS: 28% chance of exploitation in the next 30 days. The memory-management implementation in the Virtual Machine Monitor (aka VMM or hypervisor) in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does…
CVE-2007-0948, published 2007-08-14. High severity, CVSS 9.3. EPSS: 12.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS administrators to execute arbitrary code on the host OS…
CVE-2009-1542, published 2009-07-15. High severity, CVSS 9.0. EPSS: 8% chance of exploitation in the next 30 days. The Virtual Machine Monitor (VMM) in Microsoft Virtual PC 2004 SP1, 2007, and 2007 SP1, and Microsoft Virtual Server 2005 R2 SP1, does not enforce CPU privilege-level requirements for all machine…
CVE-2004-0115, published 2004-03-03. Medium severity, CVSS 4.6. EPSS: 2.2% chance of exploitation in the next 30 days. VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the…