Windows Vista Winload OS Loader (winload.exe)
Microsoft Corporation - FIPS 140 #979
This is the OS loader. It loads the boot-critical driver image files and the OS kernel image file itself.
Key facts
- Scheme
- FIPS 140
- Certificate
- 979
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- July 21, 2008
- Versions
- 6.0.6001.18000, 6.0.6001.18027, 6.0.6001.18606, 6.0.6001.22125, 6.0.6001.22861, 6.0.6002.18005, 6.0.6002.18411 and 6.0.6002.22596
- Caveat
- When operated in FIPS mode with Boot Manager (bootmgr) validated to FIPS 140-2 under Cert. #978 operating in FIPS mode
Algorithms
- AES
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2008-4250CRITICAL 9.8KEVEPSS 98.8%
- CVE-2016-7256HIGH 8.8KEVEPSS 64.6%
- CVE-2015-2426HIGH 8.8KEVEPSS 86.6%
- CVE-2015-2360HIGH 8.8KEVEPSS 14.8%
- CVE-2014-6332HIGH 8.8KEVEPSS 94.9%
- CVE-2014-4148HIGH 8.8KEVEPSS 59.9%
- CVE-2014-1812HIGH 8.8KEVEPSS 64.9%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2011-3402HIGH 8.8KEVEPSS 78.1%
- CVE-2015-2546HIGH 8.2KEVEPSS 10.1%
- CVE-2017-0199HIGH 7.8KEVEPSS 99.5%
- CVE-2017-0101HIGH 7.8KEVEPSS 57.5%
- CVE-2017-0005HIGH 7.8KEVEPSS 11.0%
- CVE-2017-0001HIGH 7.8KEVEPSS 3.1%
- CVE-2016-7255HIGH 7.8KEVEPSS 81.0%
- CVE-2016-3393HIGH 7.8KEVEPSS 68.5%
- CVE-2016-3309HIGH 7.8KEVEPSS 20.5%
- CVE-2016-0185HIGH 7.8KEVEPSS 69.8%
- CVE-2016-0167HIGH 7.8KEVEPSS 5.7%
- CVE-2016-0165HIGH 7.8KEVEPSS 13.7%
- CVE-2016-0099HIGH 7.8KEVEPSS 37.0%
- CVE-2016-0040HIGH 7.8KEVEPSS 24.5%
- CVE-2015-2387HIGH 7.8KEVEPSS 34.9%
- CVE-2015-1701HIGH 7.8KEVEPSS 55.9%
- CVE-2015-0016HIGH 7.8KEVEPSS 75.8%
- CVE-2014-6352HIGH 7.8KEVEPSS 77.5%
- CVE-2014-4114HIGH 7.8KEVEPSS 81.6%
- CVE-2014-4113HIGH 7.8KEVEPSS 86.9%
- CVE-2014-4077HIGH 7.8KEVEPSS 54.6%
- CVE-2013-3906HIGH 7.8KEVEPSS 84.9%
- CVE-2013-3660HIGH 7.8KEVEPSS 39.3%
- CVE-2012-0151HIGH 7.8KEVEPSS 87.7%
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2010-2568HIGH 7.8KEVEPSS 91.3%
- CVE-2009-1123HIGH 7.8KEVEPSS 4.9%
- CVE-2017-0147HIGH 7.5KEVEPSS 99.7%
- CVE-2015-1769MEDIUM 6.6KEVEPSS 4.1%
- CVE-2016-3298MEDIUM 6.5KEVEPSS 33.3%
- CVE-2015-0014HIGH 10.0EPSS 96.9%
- CVE-2014-6321HIGH 10.0EPSS 96.0%
- CVE-2013-3195HIGH 10.0EPSS 38.5%
- CVE-2013-3175HIGH 10.0EPSS 28.0%
- CVE-2012-4786HIGH 10.0EPSS 24.2%
- CVE-2012-1851HIGH 10.0EPSS 65.6%
- CVE-2011-1268HIGH 10.0EPSS 10.8%
- CVE-2011-0661HIGH 10.0EPSS 44.6%
- CVE-2010-2550HIGH 10.0EPSS 75.7%
- CVE-2010-0476HIGH 10.0EPSS 34.3%
- CVE-2010-0269HIGH 10.0EPSS 28.4%
- CVE-2010-0241HIGH 10.0EPSS 49.1%
and 751 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 978
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain