microsoft windows vista

Name: microsoft windows vista
Brand: microsoft

productUS

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical596high201medium28low

updated 2026-10-27

vulnerabilities (827)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-0147US	high7.5OT critical	99.7% (100th)	KEV	no fix	2017-03-17	—
CVE-2017-0199US	high7.8OT critical	99.5% (100th)	KEV	no fix	2017-04-12	—
CVE-2008-4250US	high10.0OT critical	98.8% (100th)	KEV	no fix	2008-10-23	—
CVE-2014-6332US	high9.3OT critical	94.9% (100th)	KEV	no fix	2014-11-11	—
CVE-2010-2568US	high9.3OT critical	89.6% (100th)	KEV	no fix	2010-07-22	—
CVE-2014-4113US	high7.2OT critical	86.6% (100th)	KEV	no fix	2014-10-15	—
CVE-2015-2426US	high9.3OT critical	86.6% (100th)	KEV	no fix	2015-07-20	—
CVE-2013-3906US	high7.8OT critical	84.9% (100th)	KEV	no fix	2013-11-06	—
CVE-2014-4114US	high9.3OT critical	81.6% (100th)	KEV	no fix	2014-10-15	—
CVE-2016-7255US	high7.8OT critical	81.0% (100th)	KEV	no fix	2016-11-10	—
CVE-2011-3402US	high8.8OT critical	78.1% (100th)	KEV	no fix	2011-11-04	—
CVE-2014-6352US	high7.8OT critical	77.5% (100th)	KEV	no fix	2014-10-22	—
CVE-2015-0016US	high7.8OT critical	75.8% (100th)	KEV	no fix	2015-01-13	—
CVE-2013-3918US	high8.8OT critical	73.7% (99th)	KEV	no fix	2013-11-12	—
CVE-2016-0185US	high7.8OT critical	69.8% (99th)	KEV	no fix	2016-05-11	—
CVE-2014-1812US	high9.0OT critical	65.1% (99th)	KEV	no fix	2014-05-14	—
CVE-2017-0101US	high7.8OT critical	57.5% (99th)	KEV	no fix	2017-03-17	—
CVE-2015-1701US	high7.8OT critical	55.9% (99th)	KEV	no fix	2015-04-21	—
CVE-2013-3660US	high7.8OT critical	39.3% (99th)	KEV	no fix	2013-05-24	—
CVE-2016-0099US	high7.8OT critical	37.0% (99th)	KEV	no fix	2016-03-09	—
CVE-2016-0040US	high7.8OT critical	24.3% (98th)	KEV	no fix	2016-02-10	—
CVE-2016-3309US	high7.8OT critical	20.5% (97th)	KEV	no fix	2016-08-09	—
CVE-2016-0165US	high7.8OT critical	13.7% (96th)	KEV	no fix	2016-04-12	—
CVE-2017-0005US	high7.8OT critical	11.0% (96th)	KEV	no fix	2017-03-17	—
CVE-2015-2546US	medium6.9OT critical	10.1% (96th)	KEV	no fix	2015-09-09	—
CVE-2010-4398US	high7.8OT critical	8.66% (95th)	KEV	no fix	2010-12-06	—
CVE-2015-1769US	high7.2OT critical	4.08% (91st)	KEV	no fix	2015-08-15	—
CVE-2012-0151US	high7.8OT critical	87.7% (100th)	KEV	no fix	2012-04-10	—
CVE-2016-3393US	high7.8OT critical	68.5% (99th)	KEV	no fix	2016-10-14	—
CVE-2016-7256US	high8.8OT critical	64.6% (99th)	KEV	no fix	2016-11-10	—
CVE-2014-4148US	high8.8OT critical	59.9% (99th)	KEV	no fix	2014-10-15	—
CVE-2014-4077US	high7.8OT critical	54.6% (99th)	KEV	no fix	2014-11-11	—
CVE-2015-2387US	high7.8OT critical	34.9% (98th)	KEV	no fix	2015-07-14	—
CVE-2016-3298US	medium6.5OT critical	33.3% (98th)	KEV	no fix	2016-10-14	—
CVE-2015-2360US	high7.2OT critical	14.8% (97th)	KEV	no fix	2015-06-10	—
CVE-2016-0167US	high7.8OT critical	5.68% (93rd)	KEV	no fix	2016-04-12	—
CVE-2009-1123US	high7.8OT critical	4.88% (92nd)	KEV	no fix	2009-06-10	—
CVE-2017-0001US	high7.8OT critical	3.11% (88th)	KEV	no fix	2017-03-17	—
CVE-2009-3103US	high10.0	92.3% (100th)	Exploit	no fix	2009-09-08	—
CVE-2015-6132US	high7.2	84.7% (100th)	Exploit	no fix	2015-12-09	—
CVE-2016-0041US	high7.8	82.9% (100th)	Exploit	no fix	2016-02-10	—
CVE-2017-0038US	medium5.5	82.2% (100th)	Exploit	no fix	2017-02-20	—
CVE-2009-2526US	high7.8	81.9% (100th)	Exploit	no fix	2009-10-14	—
CVE-2015-6128US	high7.2	81.9% (100th)	Exploit	no fix	2015-12-09	—
CVE-2016-3236US	critical9.8	76.8% (100th)	Exploit	no fix	2016-06-16	—
CVE-2010-2550US	high10.0	75.7% (100th)	Exploit	no fix	2010-08-11	—
CVE-2010-2729US	high9.3	75.6% (100th)	Exploit	no fix	2010-09-15	—
CVE-2012-0002US	high9.3	75.0% (100th)	Exploit	no fix	2012-03-13	—
CVE-2012-0013US	high9.3	73.9% (99th)	Exploit	no fix	2012-01-10	—
CVE-2007-0038US	high9.3	73.1% (99th)	Exploit	no fix	2007-03-30	—

showing 50 of 827

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-264159 CVEs
CWE-20Improper Input Validation129 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer118 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor89 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')84 CVEs
CWE-399CWE-39979 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')44 CVEs
CWE-189CWE-18926 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE827 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan