W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1537 In wildKEV | 8.8 | May 29 | Microsoft DirectX NULL Byte Overwrite Vulnerability Affected: All versions, or not specified |
| CVE-2010-0232 In wildKEV | 7.8 | Jan 21 | Microsoft Windows Kernel Exception Handler Vulnerability Affected: All versions, or not specified |
| CVE-2009-1123 In wildKEV | 7.8 | Jun 10 | Microsoft Windows Improper Input Validation Vulnerability Affected: All versions, or not specified |
| CVE-2004-0210 In wildKEV | 7.8 | Jul 14 | Microsoft Windows Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2002-0367 In wildKEV | 7.8 | Jun 25 | Microsoft Windows Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2009-1547 | 8.8 | Oct 14 | Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers… Affected: All versions, or not specified |
| CVE-2009-2493 | 8.8 | Jul 29 | The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and… Affected: All versions, or not specified |
| CVE-2009-0231 | 8.8 | Jul 15 | The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows… Affected: All versions, or not specified |
| CVE-2004-2339 | 8.4 | Dec 31 | Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the… Affected: All versions, or not specified |
| CVE-2009-3671 | 8.1 | Dec 9 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly… Affected: All versions, or not specified |
| CVE-2009-2529 | 8.1 | Oct 14 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-1083 | 8.1 | Apr 8 | Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote… Affected: All versions, or not specified |
| CVE-2010-0485 | 7.8 | Jun 8 | The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server… Affected: All versions, or not specified |
| CVE-2009-0082 | 7.8 | Mar 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users… Affected: All versions, or not specified |
| CVE-2004-0213 | 7.8 | Aug 6 | Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter"… Affected: All versions, or not specified |
| CVE-2002-0051 | 7.8 | Apr 4 | Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access Affected: All versions, or not specified |
| CVE-2001-1238 | 7.8 | Jul 16 | Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the… Affected: All versions, or not specified |
| CVE-2008-0087 | 7.5 | Apr 8 | The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses Affected: All versions, or not specified |
| CVE-2004-0119 | 7.5 | Jun 1 | The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from… Affected: All versions, or not specified |
| CVE-2001-1515 | 7.5 | Dec 31 | Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the… Affected: All versions, or not specified |
| CVE-2001-1452 | 7.5 | Aug 31 | By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS… Affected: All versions, or not specified |
| CVE-2009-2516 | 7.1 | Oct 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which… Affected: All versions, or not specified |
Showing 22
The 500 most important CVEs for this product (exploited first, then by severity)