$ cve CVE-2002-0367 JSON

CVE-2002-0367 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 4.9% (pctl 92)

Patch first

On CISA KEV — known exploited in the wild, due 2022-03-24.

Description

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	4.92% — more likely to be exploited than 92% of all CVEs
Weakness	CWE-269
On CISA KEV	yes — remediate by 2022-03-24
Public exploit	yes
Published	2002-06-25
Last modified	2026-06-16

CISA KEV

Name	Microsoft Windows Privilege Escalation Vulnerability
Added	2022-03-03
Due	2022-03-24
Vendor / product	Microsoft / Windows
Ransomware use	none reported

Affected (2)

Vendor	Product
microsoft	windows 2000
microsoft	windows nt

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows NT 4.0/2000 - Process Handle Local Privilege Escalation	2002-03-13

References

→ the Explorer · watch your stack · NVD