Dashboard / CVE-2002-0367

CVE-2002-0367

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows
Date Added 2022-03-03
Remediation Due 2022-03-24
https://nvd.nist.gov/vuln/detail/CVE-2002-0367

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
microsoft windows_2000 -
microsoft windows_nt 4.0
microsoft windows_nt 4.0

References & Advisories (10)

http://www.securityfocus.com/archive/1/264441
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/264927
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/4287
Broken Link Third Party Advisory VDB Entry
http://www.iss.net/security_center/static/8462.php
Broken Link Patch Vendor Advisory

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links