A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2002-0367

Microsoft Windows Privilege Escalation Vulnerability

Published
2022-03-03
Modified
2026-07-31
Sources
cisa-kev

Summary

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.