CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: Mar 24, 2022
Description
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
EPSS — Exploit Probability
4.3%
Higher than 88.7% of all CVEs
Required Action
https://nvd.nist.gov/vuln/detail/CVE-2009-1123
Risk Assessment
ELEVATEDIn CISA KEV
Details
- Severity
- High
- EPSS
- 4.3%
- CISA KEV
- Yes
- Ransomware
- Unknown
- Articles
- 0
Timeline
Published
Mar 3, 2022
Added to KEV
Mar 3, 2022
Remediation Due
Mar 24, 2022