VulnerabilityModified
CVE-2010-1888
Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."
MEDIUM 6.8EPSS 2.50%
Does this matter?
Lower severity and a low EPSS score (2.50%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."
- CVSS 2.0
- 6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 2.50% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- microsoft/windows xp
- Source
- secure@microsoft.com
References
- http://www.us-cert.gov/cas/techalerts/TA10-222A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11825
- http://www.us-cert.gov/cas/techalerts/TA10-222A.htmlUS Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11825
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.