VULNERABILITY INTELLIGENCE
CVE-2007-2229
CVSS score7.2 HIGH
EPSS probability1.55%
CISA KEVNot currently listed
Published2007-06-12
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability."
Primary references
- secure@microsoft.com
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108