AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-1209

HIGH · CVSS 7.2 EPSS 2.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-04-10 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.2. It affects Microsoft, Windows.

CVE
CVE-2007-1209
Severity
HIGH
CVSS
7.2
EPSS
2.69%
Microsoft Windows

Original NVD Description

Use-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista does not properly handle connection resources when starting and stopping processes, which allows local users to gain privileges by opening and closing multiple ApiPort connections, which leaves a "dangling pointer" to a process data structure.