Known Vulnerabilities in Microsoft IIS

10.0.08608
10.0
8.5
8.0
7.5
7.0
6.0
5.1
5.0



Denial of service Microsoft IIS and HTTP.sys driver09 Apr, 2024
Medium Patched
Remote code execution in Microsoft IIS Server10 Oct, 2023
Medium Patched
Rapid Reset Attack via HTTP/2 in Microsoft IIS10 Oct, 2023
High Patched Public exploit Exploited
Multiple DoS vulnerabilities in Microsoft IIS HTTP.sys driver12 Jul, 2023
Medium Patched
Remote code execution in Microsoft IIS14 Mar, 2023
High Patched
Denial of service in Microsoft HTTP.sys10 Aug, 2022
Medium Patched
Privilege escalation in Microsoft Windows IIS Server12 Jul, 2022
High Patched
Remote code execution in Windows HTTP Protocol Stack11 Jan, 2022
Critical Patched Public exploit Exploited
Privilege escalation in Microsoft Windows HTTP.sys12 Oct, 2021
Low Patched
HTTP Request Smuggling in Microsoft IIS Server15 Jul, 2020
Medium Not Patched
HTTP response splitting in Microsoft IIS10 Mar, 2020
Medium Patched
Privilege escalation in Microsoft IIS Server09 Oct, 2019
Medium Patched
Denial of service in Microsoft IIS Server12 Jun, 2019
Medium Patched
Denial of service in Windows FTP Server10 Jul, 2018
Medium Patched
Multiple vulnerabilities in HTTP.sys implementation in Microsoft Windows12 Jun, 2018
High Patched
Remote DoS in HTTP.sys driver in Microsoft Windows10 Apr, 2018
Medium Patched
Information disclosure in http.sys driver in Microsoft Windows11 Jul, 2017
Medium Patched
Remote code execution in Microsoft IIS 6.028 Mar, 2017
Critical Patched Zero Day Public exploit
XSS in Microsoft IIS Server14 Mar, 2017
Medium Patched
Remote code execution in Microsoft IIS14 Apr, 2015
Critical Patched Public exploit Exploited