Microsoft Windows vulnerabilities

80 CVEs affecting Microsoft Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-59033, published 2025-09-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-3389, published 2011-09-06. Medium severity, CVSS 4.3. EPSS: 73.3% chance of exploitation in the next 30 days. The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode…
CVE-2008-4037, published 2008-11-12. High severity, CVSS 9.3. EPSS: 59.1% chance of exploitation in the next 30 days. Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a client machine by…
CVE-2007-5348, published 2008-09-11. High severity, CVSS 9.3. EPSS: 52.9% chance of exploitation in the next 30 days. Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft…
CVE-1999-0524, published 1997-08-01. Medium severity, CVSS 4.0. EPSS: 32.2% chance of exploitation in the next 30 days. ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-2008-3012, published 2008-09-11. High severity, CVSS 9.3. EPSS: 31% chance of exploitation in the next 30 days. gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft…
CVE-2021-36958, published 2021-08-12. High severity, CVSS 7.8. EPSS: 30.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run…
CVE-2015-3073, published 2015-05-13. High severity, CVSS 10.0. EPSS: 25.5% chance of exploitation in the next 30 days. Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a…
CVE-2015-4716, published 2015-10-21. High severity, CVSS 10.0. EPSS: 24.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8.0.x before 8.0.4, when running on Windows, allows remote attackers to reinstall the application or…
CVE-2010-3139, published 2010-08-27. High severity, CVSS 9.3. EPSS: 23.5% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking…
CVE-2009-3864, published 2009-11-05. High severity, CVSS 7.5. EPSS: 22.5% chance of exploitation in the next 30 days. The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used,…

Latest

CVE-2025-59033, published 2025-09-08. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed (TBS) part of the code signer certificate…
CVE-2022-50238, published 2025-09-08. High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days. The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded…
CVE-2024-30164, published 2024-05-28. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolved in 3.11.1 on Windows, 3.9.1 on macOS,…
CVE-2017-20190, published 2024-03-27. EPSS: 0.3% chance of exploitation in the next 30 days. Some Microsoft technologies as used in Windows 8 through 11 allow a temporary client-side performance degradation during processing of multiple Unicode combining characters, aka a "Zalgo text"…
CVE-2022-0280, published 2022-03-10. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary…
CVE-2018-0599, published 2018-06-26. High severity, CVSS 7.8. EPSS: 5.1% chance of exploitation in the next 30 days. Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2018-0598, published 2018-06-26. High severity, CVSS 7.8. EPSS: 10% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified…
CVE-2016-4158, published 2016-06-16. High severity, CVSS 7.3. EPSS: 3% chance of exploitation in the next 30 days. Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse executable file in the…
CVE-2016-4534, published 2016-05-05. Low severity, CVSS 3.0. EPSS: 2.3% chance of exploitation in the next 30 days. The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on Windows allows local administrators to bypass intended self-protection rules and…