Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*

part: o version: * update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWindows Xp (ee6c3d4f-8190-55ff-a339-9886fe1fe140)
Editionprofessional
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3175 vulnerable 2026-06-08 05:04:30.287240 Details available
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a malformed asynchronous RPC request, aka "Remote Procedure Call Vulnerability."
Published: 2013-08-14T10:00:00.000Z
Updated: 2024-08-06T16:00:09.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1886 vulnerable 2026-06-08 04:54:10.893285 Details available
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."
Published: 2010-08-16T18:25:00.000Z
Updated: 2024-09-16T20:36:20.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1735 vulnerable 2026-06-08 04:54:10.147558 Details available
The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-08-07T01:35:53.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1734 vulnerable 2026-06-08 04:54:10.135389 Details available
The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window.
Published: 2010-05-05T18:00:00.000Z
Updated: 2024-08-07T01:35:53.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2516 vulnerable 2026-06-08 04:51:29.041161 Details available
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."
Published: 2009-10-14T10:00:00.000Z
Updated: 2025-01-21T16:36:44.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2515 vulnerable 2026-06-08 04:51:29.028404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1926 vulnerable 2026-06-08 04:51:25.772232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1139 not_vulnerable 2026-06-08 04:51:13.178218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3091 vulnerable 2026-06-08 04:49:46.792487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2374 vulnerable 2026-06-08 04:49:44.745751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1492 vulnerable 2026-06-08 04:49:42.716924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0843 vulnerable 2026-06-08 04:49:33.473997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.