Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
Windows Number Of NVD 3854 CRITICAL 65 HIGH 2644 MEDIUM 1087 LOW 58
URL https://www.microsoft.com/
Explanation For business, developer, and desktop operating system products, 10 years of support at the supported Service Pack level (with a minimum of 5 years of mainstream support, followed by a minimum of 5 years of extended support).
You may need to deploy the latest updates to be eligible for support.
For some products, the support organization may be less than 10 years.

For consumer and multimedia products, five years of mainstream support at the supported Service Pack level.

The above text is excerpted from Microsoft's Fixed Lifecycle Policy.
Tag
  • Microsoft
  • 商用ライセンス有り

Add Information URL
No Type Name URL
1 https://www.microsoft.com/ja-jp/atlife/article-windows10-portal-eos.aspx
2 https://support.microsoft.com/help/14085/fixed-lifecycle-policy
3 https://support.microsoft.com/help/30881/modern-lifecycle-policy
4 https://support.microsoft.com//lifecycle/search
5 https://support.microsoft.com/ja-jp/hub/4095338/microsoft-lifecycle-policy
6 https://support.microsoft.com/ja-jp/help/4057281/windows-7-support-ended-on-january-14-2020
7 https://docs.microsoft.com/ja-jp/windows/release-information/
8 https://docs.microsoft.com/ja-jp/lifecycle/faq/extended-security-updates

List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support
Extended
for a fee
Critical High Medium Low
3771 Windows 11 25H2 Sept. 30, 2025 Oct. 4, 2021 Oct. 12, 2027 Oct. 10, 2028 0 0 0 0
3772 Windows 11 23H2 Oct. 31, 2023 Oct. 4, 2021 15 425 130 3
3773 Windows 11 24H2 Oct. 1, 2024 Oct. 4, 2021 Oct. 13, 2026 Oct. 12, 2027 0 0 0 0
3774 Windows 10 (Enterprise, Education, Pro, Pro for Workstations, IoT, Home) 22H2 Oct. 18, 2022 July 29, 2015 Oct. 14, 2025 57 2049 872 33
3775 Windows Phone 8.1 June 24, 2014 July 11, 2017 0 0 0 0
3776 Windows RT 8.1 Nov. 13, 2013 Jan. 9, 2018 Jan. 10, 2023 27 1228 494 38
3777 Windows Embedded 8.1 Pro Nov. 13, 2013 Jan. 9, 2018 Jan. 10, 2023 30 1296 503 34
3778 Windows 8.1 Nov. 13, 2013 Jan. 9, 2018 Jan. 10, 2023 30 1296 503 34
3779 Windows Phone 7.8 Feb. 9, 2013 Oct. 14, 2014 0 0 0 0
3780 Windows 8 Oct. 30, 2012 Jan. 12, 2016 0 167 56 24
3781 Windows Embedded Standard 7(Service Pack 1適用) July 29, 2010 Oct. 13, 2015 Oct. 13, 2020 0 0 0 0
3782 Windows 7 Oct. 22, 2009 Jan. 13, 2015 April 9, 2013 Jan. 14, 2020 29 1407 538 31
3783 Windows Vista Jan. 25, 2007 April 10, 2012 April 13, 2010 April 11, 2017 1 264 67 20
3784 Windows XP Embedded Jan. 30, 2002 Jan. 12, 2016 2 287 85 0
3785 Windows XP Dec. 31, 2001 April 8, 2014 2 287 85 0
3786 Windows Millennium Edition Dec. 31, 2000 Dec. 31, 2003 July 11, 2006 0 1 1 0
3787 Microsoft Windows 2000 Professional March 31, 2000 June 30, 2005 July 13, 2010 2 40 19 0
3788 Windows 98 Second Edition June 30, 1999 June 30, 2002 July 11, 2006 1 1 1 0
3789 Windows 98 Standard Edition June 30, 1998 June 30, 2002 July 11, 2006 1 2 2 0
3790 Windows 95 Aug. 24, 1995 Dec. 31, 2001 0 3 2 0
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2
Level
Attach Vector
Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date
Show Affected Exploit
PoC
Search
3771 -
5.0
MEDIUM Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIP… NVD-CWE-Other
CVE-2009-2764 cpe:2.3:o:microsoft:windows_7:-:* 2026-04-23 09:35
2009-08-15
Show GitHub Exploit DB Packet Storm
3772 9.8
10.0
CRITICAL
Network
The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary c… CWE-94
Code Injection
CVE-2009-2494 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_xp:-:sp2
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3773 -
10.0
HIGH The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a c… CWE-255
Credentials Management
CVE-2009-1930 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:sp2…
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3774 -
9.3
HIGH Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-1929 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:-
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3775 -
6.9
MEDIUM The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing … CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-1922 cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:-
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3776 -
8.5
HIGH Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI… CWE-189
Numeric Errors
CVE-2009-1546 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:-
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3777 -
9.3
HIGH Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Go… CWE-94
Code Injection
CVE-2009-1545 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:-
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3778 8.8
9.0
HIGH
Network
Double free vulnerability in the Workstation service in Microsoft Windows allows remote authenticated users to gain privileges via a crafted RPC message to a Windows XP SP2 or SP3 or Server 2003 SP2 … CWE-399
CWE-415
 Resource Management Errors
 Double Free
CVE-2009-1544 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:-
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3779 -
2.6
LOW ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attacker… CWE-20
 Improper Input Validation 
CVE-2009-1536 cpe:2.3:o:microsoft:windows_vista:-:sp1 2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm
3780 -
9.3
HIGH Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2009-1133 cpe:2.3:o:microsoft:windows_xp:-:sp3
cpe:2.3:o:microsoft:windows_xp:-:sp2
cpe:2.3:o:microsoft:windows_vista:-:sp2…
2026-04-23 09:35
2009-08-13
Show GitHub Exploit DB Packet Storm