CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
CVSS
—
Sem CVSS
EPSS
4.9%
p92
KEV
SIM
3 de mar. de 2022
Exploit Today
78
0-100
Publicado: — · Última mod.: —
4.9%EPSS · 30 dias4.9%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Improper Input Validation Vulnerability
Adicionado ao KEV
3 de mar. de 2022
Corrigir até
24 de mar. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2009-1123
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7dCVE-2026-858807.8 ALT33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42dCVE-2026-819637.8 ALT33.7%
KEV—60Microsoft Windows Link Following Vulnerability58dCVE-2026-322024.3 MÉD99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10dCVE-2026-208055.5 MÉD94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98dCVE-2025-622217.8 ALT84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d