CVE-2002-0367 Microsoft Windows
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Privilege Escalation Vulnerability
- Added
- 2022-03-03
- Federal patch deadline
- 2022-03-24
- Ransomware use
- not known