CVE-2002-0367 Microsoft Windows Privilege Escalation Vulnerability

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用

加入 KEV: 2022/03/03
整改期限: 2022/03/24已逾期 1671 天
CISA 厂商: Microsoft
CISA 产品: Windows

要求采取的措施

Apply updates per vendor instructions.

CISA 说明

https://nvd.nist.gov/vuln/detail/CVE-2002-0367

漏洞描述

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

影响产品

暂无结构化产品信息。

修复建议