AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1922

MEDIUM · CVSS 6.9 EPSS 1.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-08-12 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.9. It affects Microsoft, Windows.

CVE
CVE-2009-1922
Severity
MEDIUM
CVSS
6.9
EPSS
1.34%
Microsoft Windows

Original NVD Description

The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MSMQ Null Pointer Vulnerability."