CVE-2004-0210
KEVMicrosoft Windows Privilege Escalation Vulnerability
Description
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedAug 6, 2004
Last modifiedJun 16, 2026
Added to KEVMar 3, 2022
Remediation dueMar 24, 2022
References
- kb.cert.org/vuls/id/647436PatchThird Party Advisory
- us-cert.gov/cas/techalerts/TA04-196A.htmlBroken LinkPatch
- docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020PatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/16590Third Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166Broken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847Broken Link
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210US Government Resource
0 recent articles mention this CVE
70
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1678 days
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 7.2% · top 6% of all CVEs
- Weakness
- CWE-120
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.