CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2009-11237.8/HIGHEPSS 4.9%CISA KEV
2009-06-10

Microsoft Windows Kernel Desktop Object Validation Local Privilege Escalation (CVE-2009-1123, MS09-025)

[Affected Scope] Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista Gold/SP1/SP2, and Server 2008 SP2

[Impact] Local attackers can execute arbitrary code in kernel mode via a crafted application, gaining complete control over the affected system

[Mitigation] Immediately apply the Microsoft MS09-025 security update and restrict local interactive logon privileges on legacy systems

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse