Cyber Resilience

CVE-2010-0232

Microsoft Windows Xp

CISA KEVActive ExploitationEUVD ExploitedPublic PoC
Published
21 January 2010
Modified
22 April 2026
KEV Added
03 March 2022
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.29 98th percentile
Risk Priority 83 floored blend · peak EPSS

Summary

CVE-2010-0232 is a high-severity an unspecified weakness vulnerability in Microsoft Windows Xp. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 2% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit…

more

applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka "Windows Kernel Exception Handler Vulnerability."

CWE(s)
NVD-CWE-noinfo
KEV Date Added
03 March 2022

Related Threats

Threat-Actor AttributionAI

APT29 (G0016)
THE DUKES 7 YEARS OF RUSSIAN CYBERESPIONAGE F-Secure Whitepaper September 2015 CONTENTS EXECUTIVE SUMMARY ........................................................................... 3 THE STORY OF THE DUKES .................................

CVEs Like This One

CVE-2010-0249Same product: Microsoft Windows 2000both on KEV
CVE-2010-0806Same product: Microsoft Windows 2000both on KEV
CVE-2010-2568Same product: Microsoft Windows 7both on KEV
CVE-2012-0151Same product: Microsoft Windows 7both on KEV
CVE-2011-3402Same product: Microsoft Windows 7both on KEV
CVE-2008-4250Same product: Microsoft Windows 2000both on KEV
CVE-2010-4398Same product: Microsoft Windows 7both on KEV
CVE-2009-1123Same product: Microsoft Windows 2000both on KEV
CVE-2009-1537Same product: Microsoft Windows 2000both on KEV
CVE-2012-4792Same product: Microsoft Windows 7both on KEV

Affected Assets

microsoft
windows 2000
all versions
microsoft
windows 7
all versions
microsoft
windows xp
all versions

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References