Software Detail

Software Informaton Top

Operating Systems

Software Detail

Windows

Number Of NVD

3854

CRITICAL

HIGH

2644

MEDIUM

1087

LOW

URL	https://www.microsoft.com/
Explanation	For business, developer, and desktop operating system products, 10 years of support at the supported Service Pack level (with a minimum of 5 years of mainstream support, followed by a minimum of 5 years of extended support). You may need to deploy the latest updates to be eligible for support. For some products, the support organization may be less than 10 years. For consumer and multimedia products, five years of mainstream support at the supported Service Pack level. The above text is excerpted from Microsoft's Fixed Lifecycle Policy.
Tag	商用ライセンス有り Microsoft

Add Information URL

No	Type	Name	URL
1			https://www.microsoft.com/ja-jp/atlife/article-windows10-portal-eos.aspx
2			https://support.microsoft.com/help/14085/fixed-lifecycle-policy
3			https://support.microsoft.com/help/30881/modern-lifecycle-policy
4			https://support.microsoft.com//lifecycle/search
5			https://support.microsoft.com/ja-jp/hub/4095338/microsoft-lifecycle-policy
6			https://support.microsoft.com/ja-jp/help/4057281/windows-7-support-ended-on-january-14-2020
7			https://docs.microsoft.com/ja-jp/windows/release-information/
8			https://docs.microsoft.com/ja-jp/lifecycle/faq/extended-security-updates

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Security Support Service Pack Support	Extended for a fee	Critical	High	Medium	Low
3821	Windows 11	25H2	Sept. 30, 2025	Oct. 4, 2021	Oct. 12, 2027	Oct. 10, 2028		0	0	0	0
3822	Windows 11	23H2	Oct. 31, 2023	Oct. 4, 2021				15	425	130	3
3823	Windows 11	24H2	Oct. 1, 2024	Oct. 4, 2021	Oct. 13, 2026	Oct. 12, 2027		0	0	0	0
3824	Windows 10 (Enterprise, Education, Pro, Pro for Workstations, IoT, Home)	22H2	Oct. 18, 2022	July 29, 2015			Oct. 14, 2025	57	2049	872	33
3825	Windows Phone 8.1			June 24, 2014	July 11, 2017			0	0	0	0
3826	Windows RT 8.1			Nov. 13, 2013	Jan. 9, 2018		Jan. 10, 2023	27	1228	494	38
3827	Windows Embedded 8.1 Pro			Nov. 13, 2013	Jan. 9, 2018		Jan. 10, 2023	30	1296	503	34
3828	Windows 8.1			Nov. 13, 2013	Jan. 9, 2018		Jan. 10, 2023	30	1296	503	34
3829	Windows Phone 7.8			Feb. 9, 2013	Oct. 14, 2014			0	0	0	0
3830	Windows 8			Oct. 30, 2012		Jan. 12, 2016		0	167	56	24
3831	Windows Embedded Standard 7（Service Pack 1適用）			July 29, 2010	Oct. 13, 2015	Oct. 13, 2020		0	0	0	0
3832	Windows 7			Oct. 22, 2009	Jan. 13, 2015	April 9, 2013	Jan. 14, 2020	29	1407	538	31
3833	Windows Vista			Jan. 25, 2007	April 10, 2012	April 13, 2010	April 11, 2017	1	264	67	20
3834	Windows XP Embedded			Jan. 30, 2002			Jan. 12, 2016	2	287	85	0
3835	Windows XP			Dec. 31, 2001			April 8, 2014	2	287	85	0
3836	Windows Millennium Edition			Dec. 31, 2000	Dec. 31, 2003		July 11, 2006	0	1	1	0
3837	Microsoft Windows 2000 Professional			March 31, 2000	June 30, 2005		July 13, 2010	2	40	19	0
3838	Windows 98 Second Edition			June 30, 1999	June 30, 2002		July 11, 2006	1	1	1	0
3839	Windows 98 Standard Edition			June 30, 1998	June 30, 2002		July 11, 2006	1	2	2	0
3840	Windows 95			Aug. 24, 1995	Dec. 31, 2001			0	3	2	0

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	Update date Published date	Show Affected	Exploit PoC Search
3821	- 9.3	HIGH	Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argum…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2008-3008	cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:sp2	2026-04-23 09:35 2008-09-11	Show	GitHub Exploit DB Packet Storm

3822	- 9.3	HIGH	Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft…	CWE-189 Numeric Errors	CVE-2007-5348	cpe:2.3:o:microsoft:windows:2003_server:sp2 cpe:2.3:o:microsoft:windows:2003_server:sp1 cpe:2.3:o:microsoft:windo…	2026-04-23 09:35 2008-09-11	Show	GitHub Exploit DB Packet Storm

3823	- 9.0	HIGH	Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote authenticated users to execute …	CWE-20 Improper Input Validation	CVE-2008-1456	cpe:2.3:o:microsoft:windows_vista:-:sp1	2026-04-23 09:35 2008-08-13	Show	GitHub Exploit DB Packet Storm

3824	- 9.0	HIGH	The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions, which allows remote aut…	CWE-20 Improper Input Validation	CVE-2008-1457	cpe:2.3:o:microsoft:windows_vista:-:sp1	2026-04-23 09:35 2008-08-13	Show	GitHub Exploit DB Packet Storm

3825	- 7.8	HIGH	Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from …	CWE-200 Information Exposure	CVE-2008-2246	cpe:2.3:o:microsoft:windows_vista:-:sp1	2026-04-23 09:35 2008-08-13	Show	GitHub Exploit DB Packet Storm

3826	- 5.4	MEDIUM	Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Mul…	CWE-20 Improper Input Validation	CVE-2008-1441	cpe:2.3:o:microsoft:windows_xp:-:sp3 cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:sp2	2026-04-23 09:35 2008-06-12	Show	GitHub Exploit DB Packet Storm

3827	- 9.3	HIGH	Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-6255	cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:sp2	2026-04-23 09:35 2008-04-23	Show	GitHub Exploit DB Packet Storm

3828	- 9.0	HIGH	Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2008-1436	cpe:2.3:o:microsoft:windows_vista:-:sp1	2026-04-23 09:35 2008-04-22	Show	GitHub Exploit DB Packet Storm

3829	7.5 8.8	HIGH Network	The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows remote attackers to spoof DNS responses.	CWE-330 Use of Insufficiently Random Values	CVE-2008-0087	cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:sp2 cpe:2.3:o:microsoft:windows_xp:-:- c…	2026-04-23 09:35 2008-04-9	Show	GitHub Exploit DB Packet Storm

3830	8.1 9.3	HIGH Network	Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arb…	CWE-119 CWE-190 Incorrect Access of Indexable Resource ('Range Error') Integer Overflow or Wraparound	CVE-2008-1083	cpe:2.3:o:microsoft:windows_vista:-:sp1	2026-04-23 09:35 2008-04-9	Show	GitHub Exploit DB Packet Storm