Microsoft Virtual Machine — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Virtual Machine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2000-0327 — CVSS 7.6 (high): Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal…
• CVE-2000-0711 — CVSS 7.5 (high): Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote…
• CVE-2003-0111 — CVSS 7.5 (high): The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer…
• CVE-2002-0865 — CVSS 7.5 (high): A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably…
• CVE-2002-0866 — CVSS 7.5 (high): Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and…
• CVE-2002-0979 — CVSS 7.5 (high): The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a…
• CVE-2002-0076 — CVSS 7.5 (high): Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet…
• CVE-2002-0058 — CVSS 5.0 (medium): Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP…
• CVE-2002-0867 — CVSS 5.0 (medium): Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet…
• CVE-2000-0132 — CVSS 2.6 (low): Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.