Microsoft Windows Nt vulnerabilities

252 CVEs affecting Microsoft Windows Nt, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5232, published 2008-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability, published 2004-08-06. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 7.2% chance of exploitation in the next 30 days. The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer…
CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability, published 2002-06-25. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 4.9% chance of exploitation in the next 30 days. smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges…
CVE-2003-0352, published 2003-08-18. High severity, CVSS 7.5. EPSS: 98.5% chance of exploitation in the next 30 days. Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by…
CVE-1999-0016, published 1997-12-01. Medium severity, CVSS 5.0. EPSS: 95.7% chance of exploitation in the next 30 days. Land IP denial of service.
CVE-2003-0533, published 2004-06-01. High severity, CVSS 7.5. EPSS: 85.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through…
CVE-2003-0818, published 2004-03-03. High severity, CVSS 7.5. EPSS: 82.2% chance of exploitation in the next 30 days. Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote…
CVE-2003-0719, published 2004-06-01. High severity, CVSS 7.5. EPSS: 81.2% chance of exploitation in the next 30 days. Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server…
CVE-2004-1080, published 2005-01-10. High severity, CVSS 10.0. EPSS: 79.8% chance of exploitation in the next 30 days. The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute…
CVE-2004-0206, published 2004-11-03. High severity, CVSS 7.5. EPSS: 74.7% chance of exploitation in the next 30 days. Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or…
CVE-1999-0874, published 1999-06-16. High severity, CVSS 10.0. EPSS: 74.7% chance of exploitation in the next 30 days. Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

Latest

CVE-2008-5232, published 2008-11-26. High severity, CVSS 9.3. EPSS: 32.2% chance of exploitation in the next 30 days. Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and 2000, and Avaya Media…
CVE-2007-6026, published 2007-11-20. High severity, CVSS 9.3. EPSS: 28.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary…
CVE-2007-1973, published 2007-04-11. Medium severity, CVSS 6.9. EPSS: 1.5% chance of exploitation in the next 30 days. Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory…
CVE-2007-1912, published 2007-04-10. Medium severity, CVSS 6.8. EPSS: 11.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.
CVE-2006-2379, published 2006-06-13. High severity, CVSS 9.3. EPSS: 54.1% chance of exploitation in the next 30 days. Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors…
CVE-2006-1184, published 2006-05-10. Medium severity, CVSS 5.0. EPSS: 29.8% chance of exploitation in the next 30 days. Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW…
CVE-2006-0034, published 2006-05-10. High severity, CVSS 7.5. EPSS: 31.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3…
CVE-2006-1591, published 2006-04-03. Medium severity, CVSS 5.1. EPSS: 7.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
CVE-2006-0988, published 2006-03-03. High severity, CVSS 7.8. EPSS: 59.5% chance of exploitation in the next 30 days. The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional…
CVE-2006-0010, published 2006-01-10. High severity, CVSS 9.3. EPSS: 33.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an…