Sign inStart freeBook a demo

Windows Mobile vulnerabilitiesRanked by how likely they are to be used.

Product9 versions
The short answer

Windows Mobile is made by Microsoft. We track 14 published vulnerabilities in it, across 9 versions. None of them is on the list of flaws known to be exploited today. If you run Windows Mobile, keep it on a version the vendor still supports.

See the riskiest flaws

We keep watching the known-exploited list.

Known exploited

Which Windows Mobile vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Windows Mobile's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Windows Mobile flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 70%
    CVE-2011-2039High

    The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without...

    CVSS7.6Published2 Jun 2011
  2. 30%
    CVE-2008-4295Medium

    Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause...

    CVSS5.4Published27 Sep 2008
  3. 20%
    CVE-2007-0878High

    Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of browser and other device functionality) via a malformed WML page, related...

    CVSS7.8Published12 Feb 2007
  4. 17%
    CVE-2007-0674High

    Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service (device hang) via a malformed JPEG file.

    CVSS7.1Published3 Feb 2007
  5. 5.8%
    CVE-2007-0685Low

    Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified...

    CVSS2.6Published3 Feb 2007
  6. 4.2%
    CVE-2007-5493Medium

    The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded.

    CVSS4.3Published18 Oct 2007
  7. 2.2%
    CVE-2007-5460Medium

    Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the USB connection from the host to the device, which might...

    CVSS4.6Published15 Oct 2007
  8. 2.0%
    CVE-2008-4540Low

    Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and...

    CVSS2.1Published13 Oct 2008
Precursor Intelligence

Running Windows Mobile? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 14 published vulnerabilities listed under the name Windows Mobile, across 9 versions.

None of Windows Mobile's vulnerabilities is on the list of flaws known to be exploited today.

Create a Precursor Intelligence account and track Windows Mobile. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring