Skip to main content

Windows Subsystem For Linux

5 CVEs product

Monthly

CVE-2025-62220 Nov 11, 18:15 HIGH This Month

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Windows Buffer Overflow Heap Overflow Microsoft Windows Subsystem For Linux
NVD
CVSS 3.1
8.8
EPSS
0.1%
CVE-2025-53788 Aug 12, 18:15 HIGH This Week

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Rated high severity (CVSS 7.0). No vendor patch available.

Windows Information Disclosure Microsoft Windows Subsystem For Linux
NVD
CVSS 3.1
7.0
EPSS
0.0%
CVE-2022-44689 Dec 13, 19:15 HIGH PATCH This Week

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Linux Microsoft Windows Server 2019 Windows Server 2022 +3
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-38014 Nov 09, 22:15 HIGH This Week

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Linux Race Condition Microsoft Windows Subsystem For Linux +1
NVD VulDB
CVSS 3.1
7.0
EPSS
0.3%
CVE-2021-43907 Dec 15, 15:15 CRITICAL PATCH Act Now

Visual Studio Code WSL Extension Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Subsystem For Linux
NVD
CVSS 3.1
9.8
EPSS
3.8%
EPSS 0% CVSS 8.8
HIGH This Month

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Windows Buffer Overflow Heap Overflow +2
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. Rated high severity (CVSS 7.0). No vendor patch available.

Windows Information Disclosure Microsoft +1
NVD
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Linux Microsoft +5
NVD
EPSS 0% CVSS 7.0
HIGH This Week

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Linux Race Condition +3
NVD VulDB
EPSS 4% CVSS 9.8
CRITICAL PATCH Act Now

Visual Studio Code WSL Extension Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Subsystem For Linux
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy