Windows Xp

Vendor:

First CVE: Apr 14, 2000 · Active for 26 years

1,352

Total CVEs

More Total CVEs than 100% of tracked products

67.6

Avg CVEs / Year

Higher CVE frequency than 99% of tracked products

7.5

Avg CVSS

Higher Avg CVSS than 59% of tracked products

1.8%

KEV Rate

Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Windows Xp over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 14, 2000

26 years ago

Most Recent CVE

Apr 29, 2020

2,277 days ago

CVE Severity & Scoring

Windows Xp1,352 CVEs

26%

71%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local55 (4.1%)

Network79 (5.8%)

Unknown1,218 (90.1%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low102 (7.5%)

High32 (2.4%)

Unknown1,218 (90.1%)

User Interaction

None80 (5.9%)

Unknown1,218 (90.1%)

Required54 (4.0%)

Privileges Required

Low29 (2.1%)

High0 (0.0%)

None105 (7.8%)

Unknown1,218 (90.1%)

Top CVEs

Signals from CVEs in this product scope (1352 CVEs).

1,352 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2010-3962HIGH Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token	Nov 5, 2010	8.1	98	YES	YES
CVE-2010-0249HIGH Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP	Jan 15, 2010	8.8	98	YES	YES
CVE-2008-4250CRITICAL The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitr	Oct 23, 2008	9.8	98	YES	YES
CVE-2012-4792HIGH Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object t	Dec 30, 2012	8.8	97	YES	YES
CVE-2012-4969HIGH Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafte	Sep 18, 2012	8.1	97	YES	YES
CVE-2012-1889HIGH Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (me	Jun 13, 2012	8.8	97	YES	YES
CVE-2010-2568HIGH Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary cod	Jul 22, 2010	7.8	97	YES	YES
CVE-2010-0806HIGH Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via ve	Mar 10, 2010	8.8	97	YES	YES
CVE-2008-0015HIGH Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in Dir	Jul 7, 2009	8.8	97	YES	YES
CVE-2013-3918HIGH The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2	Nov 12, 2013	8.8	96	YES	YES

View all 1,352 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (1352 CVEs).

CISA KEV

24 CVEs

1.8% of CVEs· 96th percentile

Metasploit

81 CVEs

6.0% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

300 CVEs

22.2% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (1352 CVEs).

Media Mentions

Signals from CVEs in this product scope (1352 CVEs).

Top CNAs Publishing CVEs For Windows Xp

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
sp3	10	6.5	17.6%	5
ibm_oem_version	2	7.7	11.6%	0
2005	3	8.9	37.7%	1