CVE-2002-0367

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2002-0367

Remediation deadline: March 24, 2022

Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Timeline

Published:March 3rd, 2022 12:00 AM

Last modified:March 3rd, 2022 12:00 AM

Added to KEV:March 3rd, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Microsoft

Products

Windows

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute