Microsoft Windows Explorer — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Explorer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-1999-0967 — CVSS 10.0 (critical): Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
• CVE-2007-1090 — CVSS 7.1 (high): Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a…
• CVE-2007-1347 — CVSS 7.1 (high): Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to…
• CVE-2005-2117 — CVSS 5.1 (medium): Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML…
• CVE-2005-0954 — CVSS 5.0 (medium): Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a…
• CVE-2006-6602 — CVSS 4.3 (medium): explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of…
• CVE-2007-0562 — CVSS 4.3 (medium): Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of…