CVE-2009-0079

no score yetEPSS 4.1%

The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-04-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_server_2003
microsoft:windows_xp

References

http://osvdb.org/53667
http://www.securitytracker.com/id?1022044
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
http://www.vupen.com/english/advisories/2009/1026
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012

Check your stack JSON