Sploitus

150 exploited vulnerabilities in Windows Vista

Showing 1–50 of 150, highest-scoring first

Vendors
Microsoft, Adobe, Centos, Mozilla, Red Hat, Suse
With known exploits
150
Affected Microsoft Windows 10 1507 versions
All versions
Affected Microsoft Windows 10 1511 versions
All versions
Affected Microsoft Windows 10 1607 versions
All versions
Affected Microsoft Windows 10 1703 versions
All versions
Affected Microsoft Windows 7 versions
All versions
Affected Microsoft Windows 8.1 versions
All versions
Affected Microsoft Windows Rt 8.1 versions
All versions
Affected Microsoft Windows Server 2008 versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 46 of these already have exploit code on Sploitus

CVE-2017-8543
CVSS 10.0 CRITICAL 2017-06-13FIX AVAILABLE
CVE-2016-7182 1 exploit
CVSS 10.0 CRITICAL 2016-10-11FIX AVAILABLE
Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)
CVE-2016-3236 2 exploits
CVSS 10.0 CRITICAL 2016-06-14
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2014-6321
CVSS 10.0 HIGH 2014-11-11FIX AVAILABLE
CVE-2013-3906 6 exploits
CVSS 10.0 HIGH 2013-11-05FIX AVAILABLE
Microsoft Tagged Image File Format (TIFF) Integer OverflowMicrosoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability
CVE-2011-2013 2 exploits
CVSS 10.0 CRITICAL 2011-11-08
Microsoft Windows TCP/IP引用计数溢出漏洞(MS11-083)Microsoft Windows - TCP/IP Stack Reference Counter Integer Overflow (MS11-083)
CVE-2011-0654 3 exploits
CVSS 10.0 HIGH 2011-02-15FIX AVAILABLE
Microsoft Windows Browser Pool Denial of ServiceMicrosoft Windows Browser Pool DoS
CVE-2010-2550 4 exploits
CVSS 10.0 HIGH 2010-08-11FIX AVAILABLE
Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow Denial of ServiceMicrosoft SMB Server Zero Size Pool Allocation
CVE-2010-0476 1 exploit
CVSS 10.0 HIGH 2010-04-14FIX AVAILABLE
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0269 1 exploit
CVSS 10.0 HIGH 2010-04-14
Microsoft Windows 7/2008 R2 - SMB Client Trans2 Stack Overflow (MS10-020) (PoC)
CVE-2010-0239 2 exploits
CVSS 10.0 HIGH 2010-02-10FIX AVAILABLE
Microsoft Windows ICMPv6路由播发缓冲区溢出漏洞（MS10-009）Microsoft Windows Vista/2008 - ICMPv6 Router Advertisement Remote Code Execution
CVE-2010-0231 5 exploits
CVSS 10.0 HIGH 2010-02-10
Windows NTLM Weak Nonce VulnerabilityWindows NTLM Weak Nonce Vulnerability
CVE-2008-4250 16 exploits
CVSS 10.0 CRITICAL 2008-10-23FIX AVAILABLE
Exploit for Code Injection in MicrosoftExploit for Code Injection in Microsoft
CVE-2011-0657 2 exploits
CVSS 9.8 CRITICAL 2011-04-13FIX AVAILABLE
Microsoft Windows DNSAPI.dll LLMNR Buffer Underrun Denial of ServiceMicrosoft Windows DNSAPI.dll LLMNR Buffer Underrun DoS
CVE-2017-0108 2 exploits
CVSS 9.3 HIGH 2017-03-14FIX AVAILABLE
Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MSMicrosoft Windows - 'USP10!otlList::insertAt' Uniscribe Font Processing Heap Buffer Overflow (MS17-011)
CVE-2016-3237 4 exploits
CVSS 9.3 HIGH 2016-08-09FIX AVAILABLE
Kerberos Security Feature BypassKerberos in Microsoft Windows - Security Feature Bypass (MS16-101)
CVE-2016-3213 2 exploits
CVSS 9.3 HIGH 2016-06-14FIX AVAILABLE
NetBIOS Response BadTunnel Brute Force Spoof (NAT Tunnel)NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)
CVE-2016-3223 4 exploits
CVSS 9.3 HIGH 2016-06-14
Microsoft Windows 7 (x32/x64) - Group Policy Privilege Escalation (MS16-072)Microsoft Windows 7 (x86x64) - Group Policy Privilege Escalation (MS16-072)
CVE-2016-0170 2 exploits
CVSS 9.3 HIGH 2016-05-10FIX AVAILABLE
Microsoft Windows - gdi32.dll Heap Based Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPMicrosoft Windows - 'gdi32.dll' Heap Buffer Overflow in ExtEscape() Triggerable via EMR_EXTESCAPE EMF Record (MS16-055)
CVE-2016-0145 2 exploits
CVSS 9.3 HIGH 2016-04-12FIX AVAILABLE
Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)
CVE-2016-0121 2 exploits
CVSS 9.3 HIGH 2016-03-08FIX AVAILABLE
Microsoft Windows - Kernel ATMFD.dll OTF Font Processing Pool-Based Buffer Overflow (MS16-026)Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
CVE-2016-0015 2 exploits
CVSS 9.3 HIGH 2016-01-12FIX AVAILABLE
Microsoft Windows devenum.dll!DeviceMoniker::Load() - Heap Corruption Buffer Underflow (MS16-007)Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
CVE-2015-2464 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
CVE-2015-2463 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory AccessMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access
CVE-2015-2462 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
CVE-2015-2460 3 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory AccessWindows ATMFD.DLL CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access Exploit
CVE-2015-2459 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows ATMFD.DLL CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access ExploitMicrosoft Windows - 'ATMFD.DLL' CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
CVE-2015-2456 2 exploits
CVSS 9.3 HIGH 2015-08-15FIX AVAILABLE
Windows win32k.sys TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow ExploiMicrosoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
CVE-2015-2455 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows win32k.sys TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow ExploitMicrosoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
CVE-2015-2432 2 exploits
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Windows ATMFD.DLL Write to Uninitialized Address Due to Malformed CFF Table ExploitMicrosoft Windows - 'ATMFD.DLL' Write to Uninitialized Address Due to Malformed CFF Table
CVE-2015-0096 17 exploits
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows LNK File Code Execution ExploitMicrosoft Windows LNK File Code Execution
CVE-2015-0081 1 exploit
CVSS 9.3 HIGH 2015-03-10FIX AVAILABLE
Microsoft Windows - Text Services Memory Corruption (MS15-020)
CVE-2015-6131 3 exploits
CVSS 9.3 HIGH 2015-12-08
Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MCMicrosoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File
CVE-2015-2510 1 exploit
CVSS 9.3 HIGH 2015-09-08FIX AVAILABLE
Microsoft Office 2007 - 'OGL.dll' ValidateBitmapInfo Bounds Check Failure (MS15-097)
CVE-2014-6352 15 exploits
CVSS 9.3 HIGH 2014-10-21
Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-ExecutionMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2014-4114 24 exploits
CVSS 9.3 HIGH 2014-10-14
Windows-OLE-Package-ManagerMS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit
CVE-2013-3174 5 exploits
CVSS 9.3 HIGH 2013-07-09FIX AVAILABLE
DirectShow Arbitrary Memory Overwrite Vulnerability (MS13-056)Microsoft DirectShow - Arbitrary Memory Overwrite (MS13-056)
CVE-2013-0810 10 exploits
CVSS 9.3 HIGH 2013-09-11FIX AVAILABLE
Microsoft Windows 10 - Theme API (ThemePack) File Parsing ExploitMicrosoft Windows 10 - Theme API ThemePack File Parsing
CVE-2012-0472
CVSS 9.3 HIGH 2012-04-24FIX AVAILABLE
CVE-2012-0002 12 exploits
CVSS 9.3 HIGH 2012-03-13FIX AVAILABLE
Alfred-TryHackMe-Walkthrough-Jenkins-Exploitation-Windows-Token-Privilege-EscalationMS12-020 Microsoft Remote Desktop Checker
CVE-2011-5046 1 exploit
CVSS 9.3 HIGH 2011-12-30FIX AVAILABLE
Apple Safari - GdiDrawStream Blue Screen of Death
CVE-2011-2003 4 exploits
CVSS 9.3 HIGH 2011-10-11FIX AVAILABLE
Microsoft Windows - .fon Kernel-Mode Buffer Overrun (PoC) (MS11-077)Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)
CVE-2011-0041 4 exploits
CVSS 9.3 HIGH 2011-04-13FIX AVAILABLE
GDI+ CreateDashedPath Integer Overflow in gdiplus.dllGDI+ CreateDashedPath Integer overflow in gdiplus.dll
CVE-2011-3402 1 exploit
CVSS 9.3 HIGH 2011-11-03FIX AVAILABLE
Windows Gather Forensics Duqu Registry Check
CVE-2010-3147 3 exploits
CVSS 9.3 HIGH 2010-08-27
Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL HijackingMicrosoft Windows - Contacts 'wab32res.dll' DLL Hijacking
CVE-2010-3145 1 exploit
CVSS 9.3 HIGH 2010-08-27
Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking
CVE-2010-0555
CVSS 9.3 HIGH 2010-02-04FIX AVAILABLE
CVE-2010-0017 4 exploits
CVSS 9.3 HIGH 2010-02-10FIX AVAILABLE
Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite LoopMicrosoft Windows - SMB Client-Side Bug (PoC) (MS10-006)
CVE-2010-2729 4 exploits
CVSS 9.3 HIGH 2010-09-15FIX AVAILABLE
Microsoft Windows - Print Spooler Service Impersonation (MS10-061) (Metasploit)Microsoft Print Spooler Service Impersonation Vulnerability
CVE-2009-0553 2 exploits
CVSS 9.3 HIGH 2009-04-15FIX AVAILABLE
Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)Microsoft IE多个内存破坏漏洞（MS09-014）