Windows Xp vulnerabilities

13 known vulnerabilities in Windows Xp from Microsoft. 13 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2013-5065Nov 28, 2013MicrosoftEPSS 34.7%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

• 8.8 High severity

  Microsoft Windows Out-of-Bounds Write Exploited

  CVE-2013-3918Nov 12, 2013MicrosoftEPSS 73.9%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, an

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2013-3660May 24, 2013MicrosoftEPSS 39.3%

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not proper

• 7.8 High severity

  Microsoft Windows Authenticode Signature Verification Remote Code Execution Exploited

  CVE-2012-0151Apr 10, 2012MicrosoftEPSS 87.7%

  The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the dig

• 8.8 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2011-3402Nov 4, 2011MicrosoftEPSS 78.3%

  Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows r

• 7.8 High severity

  Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Exploited

  CVE-2011-2005Oct 12, 2011MicrosoftEPSS 31.8%

  afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Dr

• 7.8 High severity

  Microsoft Windows Kernel Stack-Based Buffer Overflow Exploited

  CVE-2010-4398Dec 6, 2010MicrosoftEPSS 8.66%

  Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges

• 9.3 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2010-2568Jul 22, 2010MicrosoftEPSS 89.6%

  Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handle

• 7.8 High severity

  Microsoft Windows Kernel Exception Handler Exploited

  CVE-2010-0232Jan 21, 2010MicrosoftEPSS 28.7%

  The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32

• 9.3 High severity

  Microsoft Windows Video ActiveX Control Remote Code Execution Exploited

  CVE-2008-0015Jul 7, 2009MicrosoftEPSS 76.6%

  Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista G

• 7.8 High severity

  Microsoft Windows Improper Input Validation Exploited

  CVE-2009-1123Jun 10, 2009MicrosoftEPSS 4.88%

  The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, ak

• 9.3 High severity

  Microsoft DirectX NULL Byte Overwrite Exploited

  CVE-2009-1537May 29, 2009MicrosoftEPSS 51.1%

  Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a cr

• 10.0 High severity

  Microsoft Windows Buffer Overflow Exploited

  CVE-2008-4250Oct 23, 2008MicrosoftEPSS 98.8%

  The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canoni