Microsoft Windows Subsystem For Linux
7 CVEs affecting Microsoft Windows Subsystem For Linux. Latest disclosed: 2026-07-14. Critical: 1, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43907 | Critical | 9.8 | 2021-12-15 | Visual Studio Code WSL Extension Remote Code Execution Vulnerability |
CVE-2025-62220 | High | 8.8 | 2025-11-11 | Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network. |
CVE-2026-57968 | High | 7.8 | 2026-07-14 | Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2022-44689 | High | 7.8 | 2022-12-13 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2025-53788 | High | 7.0 | 2025-08-12 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
CVE-2022-38014 | High | 7.0 | 2022-11-09 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2026-57973 | Medium | 6.3 | 2026-07-14 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. |