Microsoft Windows-Nt vulnerabilities

15 CVEs affecting Microsoft Windows-Nt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3014, published 2008-09-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0927, published 2008-04-14. Medium severity, CVSS 5.0. EPSS: 70.1% chance of exploitation in the next 30 days. dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a…
CVE-2008-1087, published 2008-04-08. High severity, CVSS 9.3. EPSS: 56.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with…
CVE-2008-3008, published 2008-09-11. High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first…
CVE-2007-5348, published 2008-09-11. High severity, CVSS 9.3. EPSS: 52.9% chance of exploitation in the next 30 days. Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft…
CVE-2006-0005, published 2006-02-14. High severity, CVSS 9.3. EPSS: 38.4% chance of exploitation in the next 30 days. Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows…
CVE-2008-1436, published 2008-04-21. High severity, CVSS 9.0. EPSS: 36.8% chance of exploitation in the next 30 days. Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent…
CVE-2008-3014, published 2008-09-11. High severity, CVSS 9.3. EPSS: 36.7% chance of exploitation in the next 30 days. Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3,…
CVE-2008-1457, published 2008-08-13. High severity, CVSS 9.0. EPSS: 36.3% chance of exploitation in the next 30 days. The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote…
CVE-2008-2246, published 2008-08-13. High severity, CVSS 7.8. EPSS: 32.1% chance of exploitation in the next 30 days. Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from…
CVE-2008-3012, published 2008-09-11. High severity, CVSS 9.3. EPSS: 31% chance of exploitation in the next 30 days. gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft…

Latest

CVE-2008-1456, published 2008-08-13. High severity, CVSS 9.0. EPSS: 28% chance of exploitation in the next 30 days. Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute…
CVE-2008-1435, published 2008-07-08. High severity, CVSS 9.3. EPSS: 28.6% chance of exploitation in the next 30 days. Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files that are not…
CVE-2008-1453, published 2008-06-12. High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days. The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service Discovery Protocol (SDP)…
CVE-2008-1445, published 2008-06-12. High severity, CVSS 7.1. EPSS: 27.1% chance of exploitation in the next 30 days. Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of service (system…