OpenSSH for Windows
by Microsoft
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-27731 | Hig | 0.51 | 7.8 | 0.01 | Apr 8, 2025 | Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | ||
| CVE-2020-1292 | Hig | 0.51 | 7.8 | 0.03 | Jun 9, 2020 | An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aka 'OpenSSH for Windows Elevation of Privilege Vulnerability'. | ||
| CVE-2026-69397 | Hig | 0.49 | 7.5 | 0.01 | Sep 8, 2026 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | ||
| CVE-2024-38029 | Hig | 0.49 | 7.5 | 0.01 | Oct 8, 2024 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability | ||
| CVE-2024-43615 | Hig | 0.46 | 7.1 | 0.01 | Oct 8, 2024 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
- risk 0.51cvss 7.8epss 0.01
Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.03
An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings, aka 'OpenSSH for Windows Elevation of Privilege Vulnerability'.
- risk 0.49cvss 7.5epss 0.01
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- risk 0.49cvss 7.5epss 0.01
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability