Microsoft Windows Mobile — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Mobile, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2006-6908 — CVSS 10.0 (critical): Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows…
• CVE-2009-0244 — CVSS 8.8 (high): Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably…
• CVE-2007-0878 — CVSS 7.8 (high): Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss…
• CVE-2007-0674 — CVSS 7.1 (high): Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote…
• CVE-2008-4295 — CVSS 5.4 (medium): Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth…
• CVE-2007-5460 — CVSS 4.6 (medium): Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's…
• CVE-2007-5493 — CVSS 4.3 (medium): The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed…
• CVE-2007-0685 — CVSS 2.6 (low): Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial…
• CVE-2008-4540 — CVSS 2.1 (low): Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field…