Vulnerabilities > Microsoft > Windows Media Player

DATE CVE VULNERABILITY TITLE RISK
2017-11-15 CVE-2017-11768 Information Exposure vulnerability in Microsoft Windows Media Player
Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows remote attackers to test for the presence of files on disk via a specially crafted application.
local
high complexity
microsoft CWE-200
2.5
2002-12-31 CVE-2002-1844 Incorrect Default Permissions vulnerability in Microsoft Windows Media Player 6.3
Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges.
local
low complexity
microsoft CWE-276
7.8