AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-1926

HIGH · CVSS 7.8 EPSS 35.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-09-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-1926
Severity
HIGH
CVSS
7.8
EPSS
35.04%
Microsoft Windows

Original NVD Description

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka "TCP/IP Orphaned Connections Vulnerability."