GCVE - cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*

part: o version: - update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1229`	vulnerable	2026-06-08 04:57:57.309002	Details available win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability." Published: 2011-04-13T20:07:00.000Z Updated: 2024-08-06T22:21:33.406Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/47229 http://www.us-cert.gov/cas/techalerts/TA11-102A.html https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 http://www.vupen.com/english/advisories/2011/0952	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0080`	vulnerable	2026-06-08 04:51:07.588390	Details available The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka "Windows Thread Pool ACL Weakness Vulnerability." Published: 2009-04-15T03:49:00.000Z Updated: 2024-08-07T04:24:17.096Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1022044 http://www.us-cert.gov/cas/techalerts/TA09-104A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012 http://www.vupen.com/english/advisories/2009/1026 http://osvdb.org/53668	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0075`	not_vulnerable	2026-06-08 04:51:07.565215	Details available Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability." Published: 2009-02-10T22:13:00.000Z Updated: 2024-08-07T04:24:17.088Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 https://www.exploit-db.com/exploits/8082 http://www.zerodayinitiative.com/advisories/ZDI-09-011/ http://www.securityfocus.com/bid/33627 http://www.vupen.com/english/advisories/2009/0389	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3473`	not_vulnerable	2026-06-08 04:50:34.820705	Details available Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Event Handling Cross-Domain Vulnerability." Published: 2008-10-15T00:00:00.000Z Updated: 2024-08-07T09:37:27.040Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/45562 http://marc.info/?l=bugtraq&m=122479227205998&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13255 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 http://www.vupen.com/english/advisories/2008/2809	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2252`	vulnerable	2026-06-08 04:50:23.333433	Details available The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Corruption Vulnerability." Published: 2008-10-15T00:00:00.000Z Updated: 2024-08-07T08:58:01.671Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=122479227205998&w=2 http://secunia.com/advisories/32247 https://exchange.xforce.ibmcloud.com/vulnerabilities/45543 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-061 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6045	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1441`	vulnerable	2026-06-08 04:50:20.532909	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2223`	not_vulnerable	2026-06-08 04:49:44.353054	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.