Microsoft Windows Subsystem For Linux
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Windows Subsystem For Linux.
Recent Microsoft Windows Subsystem For Linux Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-88237 | CVE-2026-88237 Windows Subsystem for Linux Elevation of Privilege Vulnerability | November 10, 2026 |
| CVE-2026-119834 | CVE-2026-119834 Windows Subsystem for Linux Elevation of Privilege Vulnerability | November 10, 2026 |
| CVE-2026-119846 | CVE-2026-119846 Windows Subsystem for Linux Elevation of Privilege Vulnerability | November 10, 2026 |
| CVE-2026-70027 | CVE-2026-70027 Windows Subsystem for Linux Elevation of Privilege Vulnerability | October 13, 2026 |
| CVE-2026-96309 | CVE-2026-96309 Windows Subsystem for Linux Elevation of Privilege Vulnerability | October 13, 2026 |
| CVE-2026-85879 | CVE-2026-85879 Windows Subsystem for Linux Elevation of Privilege Vulnerability | October 13, 2026 |
| CVE-2026-96206 | CVE-2026-96206 Windows Subsystem for Linux Information Disclosure Vulnerability | October 13, 2026 |
| CVE-2026-57973 | CVE-2026-57973 Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability | July 14, 2026 |
| CVE-2026-57968 | CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability | July 14, 2026 |
| CVE-2026-21237 | CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability | February 10, 2026 |
By the Year
In 2026 there have been 4 vulnerabilities in Microsoft Windows Subsystem For Linux with an average score of 6.9 out of ten. Last year, in 2025 Windows Subsystem For Linux had 3 security vulnerabilities published. That is, 1 more vulnerability have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.83
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 6.90 |
| 2025 | 3 | 7.73 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 2 | 7.40 |
| 2021 | 1 | 9.80 |
It may take a day or so for new Windows Subsystem For Linux vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Windows Subsystem For Linux Security Vulnerabilities
Oct 2026: Windows Subsystem for Linux Information Disclosure Vulnerability
CVE-2026-96206
6.5 - Medium
- October 13, 2026
Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.
Use of Uninitialized Resource
Oct 2026: Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2026-85879
7 - High
- October 13, 2026
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
TOCTTOU
Jul 2026: Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2026-57968
7.8 - High
- July 14, 2026
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Buffer Over-read
Jul 2026: Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
CVE-2026-57973
6.3 - Medium
- July 14, 2026
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
TOCTTOU
Aug 2025: Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2025-53788
7 - High
- August 12, 2025
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
TOCTTOU
Apr 2025: Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVE-2025-26675
7.8 - High
- April 08, 2025
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Out-of-bounds Read
Mar 2025: Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
CVE-2025-24084
8.4 - High
- March 11, 2025
Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.
Untrusted Pointer Dereference
WSL2 Kernel Privilege Escalation Vulnerability
CVE-2022-44689
7.8 - High
- December 13, 2022
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
Nov 2022: Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2022-38014
7 - High
- November 09, 2022
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
CVE-2021-43907
9.8 - Critical
- December 15, 2021
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows Subsystem For Linux or by Microsoft? Click the Watch button to subscribe.
