GCVE - cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*

part: o version: sp2 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Vista (`bda7fc97-9e6d-5e57-b33c-ba0ce76634f1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4969`	not_vulnerable	2026-06-08 05:02:53.477200	Details available Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012. Published: 2012-09-18T10:00:00.000Z Updated: 2025-10-22T00:05:46.392Z Open on db.gcve.eu Reference links http://www.us-cert.gov/cas/techalerts/TA12-265A.html http://www.kb.cert.org/vuls/id/480095 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729 http://www.us-cert.gov/cas/techalerts/TA12-262A.html http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0178`	vulnerable	2026-06-08 05:00:39.779140	Details available Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability." Published: 2012-05-09T00:00:00.000Z Updated: 2024-08-06T18:16:19.317Z Open on db.gcve.eu Reference links http://secunia.com/advisories/49115 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-033 http://www.securitytracker.com/id?1027043 http://osvdb.org/81735 http://www.us-cert.gov/cas/techalerts/TA12-129A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0233`	vulnerable	2026-06-08 04:51:53.627573	Details available Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka "Windows Kernel Double Free Vulnerability." Published: 2010-02-10T18:00:00.000Z Updated: 2024-08-07T00:45:11.910Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392 http://www.us-cert.gov/cas/techalerts/TA10-040A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1530`	not_vulnerable	2026-06-08 04:51:23.870523	Details available Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Objects Memory Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-08-07T05:13:25.880Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/504209/100/0/threaded http://www.vupen.com/english/advisories/2009/1538 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 http://www.zerodayinitiative.com/advisories/ZDI-09-038 http://www.us-cert.gov/cas/techalerts/TA09-160A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1529`	not_vulnerable	2026-06-08 04:51:23.868201	Details available Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-10-21T16:31:00.075Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1538 http://www.securityfocus.com/archive/1/504205/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 http://www.zerodayinitiative.com/advisories/ZDI-09-036 http://www.securityfocus.com/bid/35223	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0229`	vulnerable	2026-06-08 04:51:08.464906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.