CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2010-02327.8/HIGHEPSS 28.7%CISA KEV
2010-01-21

Microsoft Windows Kernel NTVDM Exception Handling Privilege Escalation (CVE-2010-0232, KiTrap0D) Technical Analysis and Mitigation Guide

[Affected Scope] Windows NT 3.1 through Windows 7, and Windows Server 2008 on 32-bit (x86) platforms with 16-bit application support (NTVDM) enabled.

[Impact] Local attackers can exploit this vulnerability to bypass kernel-mode security boundaries, execute arbitrary code with SYSTEM privileges, and fully compromise the host.

[Mitigation] Apply the official Microsoft MS10-015 security update, or disable the 16-bit application subsystem (NTVDM) via Group Policy or Registry modifications.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse