CVE-2009-0078observed exploitation

CVE-2009-0078

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

45Vexday Risk Score

Prioritize patching. It exploitation observed in the wild and has a public proof of concept.

ssvc Actepss 2.7%
from disclosure to weaponsame day
Published on NVDApr 15
1st PoCApr 14
Observed exploitationApr 14
The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows WMI Service Isolation Vulnerability."
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.