Windows Subsystem For Linux
by Microsoft
CVEs (28)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-53788 | Hig | 0.46 | 7.0 | 0.00 | Aug 12, 2025 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | ||
| CVE-2022-38014 | Hig | 0.46 | 7.0 | 0.00 | Nov 9, 2022 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | ||
| CVE-2019-1416 | Hig | 0.46 | 7.0 | 0.00 | Nov 12, 2019 | An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. | ||
| CVE-2020-1075 | Med | 0.36 | 5.5 | 0.01 | May 21, 2020 | An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'. | ||
| CVE-2019-0553 | Med | 0.36 | 5.5 | 0.02 | Jan 8, 2019 | An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. | ||
| CVE-2018-8337 | Med | 0.35 | 5.3 | 0.01 | Sep 13, 2018 | A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers. | ||
| CVE-2026-57973 | Med | 0.00 | 6.3 | 0.00 | Jul 14, 2026 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. | ||
| CVE-2026-57968 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 7.0epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.
- risk 0.36cvss 5.5epss 0.01
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.
- risk 0.36cvss 5.5epss 0.02
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
- risk 0.35cvss 5.3epss 0.01
A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.
- risk 0.00cvss 6.3epss 0.00
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
- risk 0.00cvss 7.8epss 0.00
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Page 2 of 2