# Microsoft Windows 2000 vulnerabilities Source: https://junglewise.ai/threats/technologies/windows-2000 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows-2000.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Microsoft Windows 2000: 0 in the last 7 days and 0 in the last 90 days, 8 of them critical and 6 exploited in the wild. The most recent, CVE-2009-1537, was published on 20 May 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 19 (8 critical, 6 exploited in the wild) ## About Microsoft Windows 2000 Windows 2000 is a server and client operating system released by Microsoft. ## Latest Microsoft Windows 2000 vulnerabilities - [CVE-2009-1537: Microsoft DirectX NULL byte overwrite in QuickTime Movie Parser Filter](https://junglewise.ai/threats/cve-2009-1537-microsoft-directx-null-byte-overwrite-in-quicktime-movie-parser) (critical, exploited in the wild, CVSS 9.3, published 20 May 2026) - [CVE-2008-0015: Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow](https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in) (critical, exploited in the wild, CVSS 9.3, published 17 Feb 2026) - [CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2002-0367-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2010-0232: Microsoft Windows Kernel Exception Handler Vulnerability](https://junglewise.ai/threats/cve-2010-0232-microsoft-windows-kernel-exception-handler-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2009-1123-microsoft-windows-improper-input-validation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-1999-0153: Microsoft Windows 95/NT denial of service in NetBIOS via OOB data](https://junglewise.ai/threats/cve-1999-0153-microsoft-windows-95-nt-denial-of-service-in-netbios-via-oob-data) (medium, CVSS 5, published 1 Jul 1997) - [CVE-1999-0612: Generic finger service information disclosure](https://junglewise.ai/threats/cve-1999-0612-generic-finger-service-information-disclosure) (info, CVSS 0, published 1 Mar 1997) - [CVE-1999-0511: Generic Operating System IP forwarding enabled on non-router host](https://junglewise.ai/threats/cve-1999-0511-generic-operating-system-ip-forwarding-enabled-on-non-router-host) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0562: Microsoft Windows NT remote registry access by non-administrators](https://junglewise.ai/threats/cve-1999-0562-microsoft-windows-nt-remote-registry-access-by-non-administrators) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0535: Microsoft Windows NT insecure password policy configuration](https://junglewise.ai/threats/cve-1999-0535-microsoft-windows-nt-insecure-password-policy-configuration) (critical, CVSS 10, published 1 Jan 1997) - [CVE-1999-0499: Microsoft Windows NT information disclosure via SNMP registry keys](https://junglewise.ai/threats/cve-1999-0499-microsoft-windows-nt-information-disclosure-via-snmp-registry-keys) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0504: Microsoft Windows NT default or blank password for local accounts](https://junglewise.ai/threats/cve-1999-0504-microsoft-windows-nt-default-or-blank-password-for-local-accounts) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0572: Microsoft Windows NT Registry Editor file association vulnerability](https://junglewise.ai/threats/cve-1999-0572-microsoft-windows-nt-registry-editor-file-association) (critical, CVSS 9.3, published 1 Jan 1997) - [CVE-1999-0519: Microsoft NetBIOS and SMB null or default password on network shares](https://junglewise.ai/threats/cve-1999-0519-microsoft-netbios-and-smb-null-or-default-password-on-network) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0503: Microsoft Windows NT guessable password for local accounts](https://junglewise.ai/threats/cve-1999-0503-microsoft-windows-nt-guessable-password-for-local-accounts) (high, CVSS 7.2, published 1 Jan 1997) - [CVE-1999-0249: Microsoft Windows NT arbitrary command execution in RSHSVC](https://junglewise.ai/threats/cve-1999-0249-microsoft-windows-nt-arbitrary-command-execution-in-rshsvc) (high, CVSS 7.2, published 1 Jan 1997) - [CVE-1999-0534: Microsoft Windows NT excessive user privileges assignment](https://junglewise.ai/threats/cve-1999-0534-microsoft-windows-nt-excessive-user-privileges-assignment) (medium, CVSS 4.6, published 1 Jan 1997) - [CVE-1999-0582: Microsoft Windows NT insecure account lockout policy configuration](https://junglewise.ai/threats/cve-1999-0582-microsoft-windows-nt-insecure-account-lockout-policy-configuration) (medium, CVSS 5, published 1 Jan 1997) ## Most severe Microsoft Windows 2000 vulnerabilities - [CVE-2008-0015: Microsoft Windows Video ActiveX Control stack buffer overflow in DirectShow](https://junglewise.ai/threats/cve-2008-0015-microsoft-windows-video-activex-control-stack-buffer-overflow-in) (critical, exploited in the wild, CVSS 9.3, published 17 Feb 2026) - [CVE-2009-1537: Microsoft DirectX NULL byte overwrite in QuickTime Movie Parser Filter](https://junglewise.ai/threats/cve-2009-1537-microsoft-directx-null-byte-overwrite-in-quicktime-movie-parser) (critical, exploited in the wild, CVSS 9.3, published 20 May 2026) - [CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2004-0210-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2010-0232: Microsoft Windows Kernel Exception Handler Vulnerability](https://junglewise.ai/threats/cve-2010-0232-microsoft-windows-kernel-exception-handler-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability](https://junglewise.ai/threats/cve-2009-1123-microsoft-windows-improper-input-validation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability](https://junglewise.ai/threats/cve-2002-0367-microsoft-windows-privilege-escalation-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Mar 2022) - [CVE-1999-0535: Microsoft Windows NT insecure password policy configuration](https://junglewise.ai/threats/cve-1999-0535-microsoft-windows-nt-insecure-password-policy-configuration) (critical, CVSS 10, published 1 Jan 1997) - [CVE-1999-0572: Microsoft Windows NT Registry Editor file association vulnerability](https://junglewise.ai/threats/cve-1999-0572-microsoft-windows-nt-registry-editor-file-association) (critical, CVSS 9.3, published 1 Jan 1997) - [CVE-1999-0562: Microsoft Windows NT remote registry access by non-administrators](https://junglewise.ai/threats/cve-1999-0562-microsoft-windows-nt-remote-registry-access-by-non-administrators) (high, CVSS 7.5, published 1 Jan 1997) - [CVE-1999-0504: Microsoft Windows NT default or blank password for local accounts](https://junglewise.ai/threats/cve-1999-0504-microsoft-windows-nt-default-or-blank-password-for-local-accounts) (high, CVSS 7.5, published 1 Jan 1997) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows): 2,362 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 589 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 565 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 534 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 534 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 528 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 521 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 517 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 494 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 476 vulnerabilities - [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809): 380 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 373 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows 2000 vulnerabilities", https://junglewise.ai/threats/technologies/windows-2000, 11 November 2026.