Microsoft Windows Subsystem For Linux vulnerabilities

7 CVEs affecting Microsoft Windows Subsystem For Linux, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-57973, published 2026-07-14.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-43907, published 2021-12-15. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Visual Studio Code WSL Extension Remote Code Execution Vulnerability
• CVE-2025-62220, published 2025-11-11. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.
• CVE-2022-44689, published 2022-12-13. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
• CVE-2022-38014, published 2022-11-09. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
• CVE-2026-57968, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
• CVE-2025-53788, published 2025-08-12. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
• CVE-2026-57973, published 2026-07-14. Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days. Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.