cve.bz

Microsoft Patch Tuesday, March 2009: the CVEs

Filter

Microsoft Patch Tuesday March 2009: the CVEs Microsoft published on 10 March 2009, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Feb 2009, Jan 2009, Dec 2008, Nov 2008, Oct 2008, Sep 2008, Aug 2008, Jul 2008, Jun 2008, May 2008, Apr 2008, Mar 2008. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. –CVE-2009-0085EPSS 15%

    The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when certificate authentication is used, does not properly validate the…

  2. –CVE-2009-0083EPSS 1.5%

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Ke…

  3. 7.8CVE-2009-0082EPSS 1.4%

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers …

  4. –CVE-2009-0081EPSS 32%

    The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate input received from user mode, which al…