{"schema_version":1,"title":"Microsoft Windows Subsystem For Linux vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Microsoft Windows Subsystem For Linux: 3 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88237, was published on 10 November 2026. 4 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/windows-subsystem-for-linux","json_url":"https://junglewise.ai/threats/technologies/windows-subsystem-for-linux.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/windows-subsystem-for-linux","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":6,"all_time":8,"critical":0,"exploited":0,"last_7_days":3,"last_30_days":4,"last_90_days":7,"last_365_days":7},"latest":[{"cve":"CVE-2026-88237","cvss":7,"slug":"cve-2026-88237-use-after-free-in-windows-subsystem-for-linux-allows-an","title":"Windows Subsystem for Linux use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:21:32.703+00:00","url":"https://junglewise.ai/threats/cve-2026-88237-use-after-free-in-windows-subsystem-for-linux-allows-an"},{"cve":"CVE-2026-119846","cvss":7.8,"slug":"cve-2026-119846-out-of-bounds-read-in-windows-subsystem-for-linux-allows-an","title":"Windows Subsystem for Linux out-of-bounds read privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:20:01.687+00:00","url":"https://junglewise.ai/threats/cve-2026-119846-out-of-bounds-read-in-windows-subsystem-for-linux-allows-an"},{"cve":"CVE-2026-119834","cvss":7.8,"slug":"cve-2026-119834-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows","title":"Microsoft Windows Subsystem for Linux heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-11-10T19:19:59.043+00:00","url":"https://junglewise.ai/threats/cve-2026-119834-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows"},{"cve":"CVE-2026-112917","slug":"cve-2026-112917-in-docker-desktop-for-windows-with-the-wsl2-backend-an","title":"Docker Desktop for Windows WSL2 seccomp bypass via 32-bit socketcall","severity":"info","exploited":false,"published_at":"2026-11-03T19:17:53.727+00:00","url":"https://junglewise.ai/threats/cve-2026-112917-in-docker-desktop-for-windows-with-the-wsl2-backend-an"},{"cve":"CVE-2026-96206","cvss":6.5,"epss":0.0045,"slug":"cve-2026-96206-use-of-uninitialized-resource-in-windows-subsystem-for-linux","title":"Microsoft Windows Subsystem for Linux information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:46.757+00:00","url":"https://junglewise.ai/threats/cve-2026-96206-use-of-uninitialized-resource-in-windows-subsystem-for-linux"},{"cve":"CVE-2026-85879","cvss":7,"epss":0.0022,"slug":"cve-2026-85879-time-of-check-time-of-use-toctou-race-condition-in-windows","title":"Windows Subsystem for Linux TOCTOU race condition privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:15.073+00:00","url":"https://junglewise.ai/threats/cve-2026-85879-time-of-check-time-of-use-toctou-race-condition-in-windows"},{"cve":"CVE-2026-70027","cvss":7.8,"epss":0.0034,"slug":"cve-2026-70027-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows","title":"Windows Subsystem for Linux heap buffer overflow privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T19:19:14.01+00:00","url":"https://junglewise.ai/threats/cve-2026-70027-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows"},{"cve":"CVE-2025-62220","cvss":8.8,"epss":0.0072,"slug":"cve-2025-62220-heap-based-buffer-overflow-in-windows-subsystem-for-linux-gui","title":"Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.","severity":"high","exploited":false,"published_at":"2025-11-11T18:15:49.73+00:00","url":"https://junglewise.ai/threats/cve-2025-62220-heap-based-buffer-overflow-in-windows-subsystem-for-linux-gui"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":3}],"related":[{"name":"Microsoft Windows","slug":"windows","vulnerabilities":2362,"url":"https://junglewise.ai/threats/technologies/windows"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":589,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":565,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":534,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":528,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":521,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":517,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":494,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":476,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows 10 1809","slug":"windows-10-1809","vulnerabilities":380,"url":"https://junglewise.ai/threats/technologies/windows-10-1809"},{"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":373,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"}],"technology":{"hub":true,"name":"Microsoft Windows Subsystem For Linux","slug":"windows-subsystem-for-linux","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"category":"os","homepage":"https://learn.microsoft.com/en-us/windows/wsl/","repo_url":"https://github.com/microsoft/WSL","description":"Windows Subsystem for Linux is a feature of the Windows operating system that allows users to run a GNU/Linux environment directly on Windows.","url":"https://junglewise.ai/threats/technologies/windows-subsystem-for-linux"},"most_severe":[{"cve":"CVE-2025-62220","cvss":8.8,"epss":0.0072,"slug":"cve-2025-62220-heap-based-buffer-overflow-in-windows-subsystem-for-linux-gui","title":"Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.","severity":"high","exploited":false,"published_at":"2025-11-11T18:15:49.73+00:00","url":"https://junglewise.ai/threats/cve-2025-62220-heap-based-buffer-overflow-in-windows-subsystem-for-linux-gui"},{"cve":"CVE-2026-70027","cvss":7.8,"epss":0.0034,"slug":"cve-2026-70027-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows","title":"Windows Subsystem for Linux heap buffer overflow privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T19:19:14.01+00:00","url":"https://junglewise.ai/threats/cve-2026-70027-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows"},{"cve":"CVE-2026-119846","cvss":7.8,"slug":"cve-2026-119846-out-of-bounds-read-in-windows-subsystem-for-linux-allows-an","title":"Windows Subsystem for Linux out-of-bounds read privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:20:01.687+00:00","url":"https://junglewise.ai/threats/cve-2026-119846-out-of-bounds-read-in-windows-subsystem-for-linux-allows-an"},{"cve":"CVE-2026-119834","cvss":7.8,"slug":"cve-2026-119834-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows","title":"Microsoft Windows Subsystem for Linux heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-11-10T19:19:59.043+00:00","url":"https://junglewise.ai/threats/cve-2026-119834-heap-based-buffer-overflow-in-windows-subsystem-for-linux-allows"},{"cve":"CVE-2026-85879","cvss":7,"epss":0.0022,"slug":"cve-2026-85879-time-of-check-time-of-use-toctou-race-condition-in-windows","title":"Windows Subsystem for Linux TOCTOU race condition privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:15.073+00:00","url":"https://junglewise.ai/threats/cve-2026-85879-time-of-check-time-of-use-toctou-race-condition-in-windows"},{"cve":"CVE-2026-88237","cvss":7,"slug":"cve-2026-88237-use-after-free-in-windows-subsystem-for-linux-allows-an","title":"Windows Subsystem for Linux use-after-free privilege escalation","severity":"high","exploited":false,"published_at":"2026-11-10T19:21:32.703+00:00","url":"https://junglewise.ai/threats/cve-2026-88237-use-after-free-in-windows-subsystem-for-linux-allows-an"},{"cve":"CVE-2026-96206","cvss":6.5,"epss":0.0045,"slug":"cve-2026-96206-use-of-uninitialized-resource-in-windows-subsystem-for-linux","title":"Microsoft Windows Subsystem for Linux information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:46.757+00:00","url":"https://junglewise.ai/threats/cve-2026-96206-use-of-uninitialized-resource-in-windows-subsystem-for-linux"},{"cve":"CVE-2026-112917","slug":"cve-2026-112917-in-docker-desktop-for-windows-with-the-wsl2-backend-an","title":"Docker Desktop for Windows WSL2 seccomp bypass via 32-bit socketcall","severity":"info","exploited":false,"published_at":"2026-11-03T19:17:53.727+00:00","url":"https://junglewise.ai/threats/cve-2026-112917-in-docker-desktop-for-windows-with-the-wsl2-backend-an"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}