Microsoft Windows Messenger — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Messenger, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2004-0597 — CVSS 10.0 (critical): Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via…
• CVE-2008-0082 — CVSS 10.0 (critical): An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which allows remote…