EXPOSURES › CVE-2004-0210
CVE-2004-0210
HIGH ⌖ ON CISA KEV · EXPLOITEDA 20-year-old Windows privilege escalation flaw in the POSIX subsystem allows local users to gain full system control.
This unpatched vulnerability, now in the CISA KEV catalog, demonstrates how long-standing, known flaws remain exploitable in widely deployed systems. DIB organizations must rigorously patch legacy OS components and monitor for KEV entries to prevent local-to-remote escalation and compliance failures under NIST 800-171.
Shame score — A known, unpatched privilege escalation flaw in a foundational OS component that remains actively exploitable years after disclosure.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |