CVE-2002-0367 — Microsoft Windows Privilege Escalation Vulnerability

provenance: imported · CVE: CVE-2002-0367

CVE-2002-0367: Microsoft Windows Privilege Escalation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Microsoft
Product	Windows
Date added	2022-03-03
Due date	2022-03-24
Ransomware campaign use	Unknown

Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2002-0367

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0367
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog