Microsoft Windows Embedded Compact — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Embedded Compact, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2006-6908 — CVSS 10.0 (critical): Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows…
• CVE-2008-2160 — CVSS 9.3 (critical): Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to…
• CVE-2001-0162 — CVSS 7.5 (high): WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
• CVE-2018-0842 — CVSS 7.0 (high): Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703…