VULNERABILITY INTELLIGENCE

CVE-2006-3443

CVSS score7.2 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2006-08-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the UserProfile directory, aka "User Profile Elevation of Privilege Vulnerability."

Primary references