CVE-2010-2554

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL Vulnerability."

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C

EPSS

1.92% chance of exploitation in the next 30 days, 78th percentile

Published

2010-08-11

Updated

2025-01-21

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14610

References

• CVE Record
• NVD entry

Related

• CVE-2010-2553
• CVE-2010-2561
• CVE-2010-2550
• CVE-2010-2568
• CVE-2010-2549
• CVE-2010-2590