CVE-2010-3889

EXPLOITED IN THE WILD

Microsoft Windows - Privilege Escalation

Title source: llm

Exploitation Summary

CVE-2010-3889 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).

Description

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.

References (6)

Core 6

Core References

Various Sources x_refsource_misc

http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml

Various Sources x_refsource_misc

http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29

Third Party Advisory x_refsource_misc

http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities

Various Sources x_refsource_misc

http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_

Various Sources x_refsource_misc

http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml

Various Sources x_refsource_misc

http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061

Scores

EPSS 0.0161

EPSS Percentile 73.5%

Details

VulnCheck KEV 2010-10-08

InTheWild.io 2018-08-13

Status published

Products (1)

microsoft/windows

Published Oct 08, 2010

Tracked Since Feb 18, 2026