{"cvss":7.8,"datePublished":"2022-03-03","dateUpdated":"2022-03-03","description":"smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.","dueDate":"2022-03-24","id":"CVE-2002-0367","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367","product":"Windows","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Microsoft Windows Privilege Escalation Vulnerability","vendor":"Microsoft"}