{"id":"CVE-2009-1123","url":"https://www.cyber-defence.io/tools/cve/CVE-2009-1123","generatedAt":"2026-10-27T21:09:12.165Z","title":"Microsoft Windows Improper Input Validation Vulnerability","description":"The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Desktop Vulnerability.\"","published":"2009-06-10T18:30:00.000Z","lastModified":"2026-06-16T23:06:33.000Z","status":"Analyzed","sourceIdentifier":"secure@microsoft.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["microsoft/windows 2000","microsoft/windows server 2003","microsoft/windows server 2008","microsoft/windows vista","microsoft/windows xp"],"epss":{"score":0.04878,"percentile":0.92001,"date":"2026-10-26","history":[]},"kev":{"listed":true,"dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2009-1123"},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 24 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://osvdb.org/54940","tags":["Broken Link"],"source":"secure@microsoft.com"},{"url":"http://secunia.com/advisories/35372","tags":["Broken Link"],"source":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id?1022359","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secure@microsoft.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","tags":["Broken Link","Third Party Advisory","US Government Resource"],"source":"secure@microsoft.com"},{"url":"http://www.vupen.com/english/advisories/2009/1544","tags":["Broken Link"],"source":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","tags":["Patch","Vendor Advisory"],"source":"secure@microsoft.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206","tags":["Broken Link"],"source":"secure@microsoft.com"},{"url":"http://osvdb.org/54940","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35372","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1022359","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-160A.html","tags":["Broken Link","Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1544","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1123","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1123","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}