Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-03-24. Apply updates per vendor instructions.
Priority
HIGH
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 3 products
00:00 UTC: CVE-2004-0210 disclosed. CISA: CVE-2004-0210 added to Known Exploited Vulnerabilities — Microsoft Windows Status: ✅ Confirmed exploited in the wild Date added: 2022-03-03 Required action: Apply updates per vendor instructions.
Post summary
The post confirms that CVE-2004-0210 is actively exploited in the wild, as per CISA’s known exploited vulnerabilities list, and urges applying vendor-provided updates.
https://research.lyrie.ai/research/active-exploit-cve-2004-0210-windows #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The linked research notes an active exploitation of CVE‑2004‑0210 on Windows, likely presenting PoC code and hinting at real‑world usage, but does not mention mitigating patches or provide detailed technical analysis.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | interix | 2.2 | - | - |
| OS | microsoft | windows_2000 | - | - | - |
| OS | microsoft | windows_2000 | - | - | - |
| OS | microsoft | windows_2000 | - | - | - |
| OS | microsoft | windows_nt | 4.0 | - | - |
| OS | microsoft | windows_nt | 4.0 | - | - |
| OS | microsoft | windows_nt | 4.0 | - | - |