cve-2002-0367

HIGH CVSS 7.8 cisa_known_exploited
Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Timeline
Published
2022-03-03
Last Modified
2022-03-03
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 7.8,
  "datePublished": "2022-03-03",
  "dateUpdated": "2022-03-03",
  "description": "smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.",
  "dueDate": "2022-03-24",
  "id": "CVE-2002-0367",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2002-0367",
  "product": "Windows",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "cisa_known_exploited",
  "title": "Microsoft Windows Privilege Escalation Vulnerability",
  "vendor": "Microsoft"
}
Enrichment data
View JSON API Download JSON