CVE-2008-4269

no score yetEPSS 21%

The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrusted parameter data obtained from incorrect parsing, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Windows Search Parsing Vulnerability."

EPSS: 21% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2008-12-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_server_2008
microsoft:windows_vista

References

http://secunia.com/advisories/33053
http://www.securitytracker.com/id?1021366
http://www.us-cert.gov/cas/techalerts/TA08-344A.html
http://www.vupen.com/english/advisories/2008/3387
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-075

Check your stack JSON