PatchSiren

PatchSiren cyber security CVE debrief

CVE-2002-0367 Microsoft CVE debrief

CVE-2002-0367 is a Microsoft Windows privilege escalation vulnerability that CISA included in its Known Exploited Vulnerabilities catalog. The KEV listing means CISA has identified it as being actively or historically exploited in the wild, so it should be treated as a real-world defensive priority even though the corpus does not provide deeper technical detail or a CVSS score.

Vendor
Microsoft
Product
Windows
CVSS
Unknown
CISA KEV
Listed
Original CVE published
2022-03-03
Original CVE updated
2022-03-03
Advisory published
2022-03-03
Advisory updated
2022-03-03

Who should care

Windows administrators, endpoint and vulnerability management teams, incident responders, and security operations teams responsible for Microsoft Windows systems should pay attention, especially if they manage legacy or long-lived endpoints that may still be exposed to older Windows issues.

Technical summary

The available corpus identifies the issue only at a high level: a Microsoft Windows privilege escalation vulnerability. No exploit mechanics, affected component details, or scoring are included in the supplied sources. What is clear is that CISA flagged it as a known exploited vulnerability and set a remediation due date of 2022-03-24 after adding it on 2022-03-03.

Defensive priority

High. CISA KEV inclusion indicates confirmed or credibly observed exploitation, which generally makes remediation urgent regardless of missing CVSS data.

Recommended defensive actions

  • Apply vendor-recommended updates and mitigations as directed by Microsoft.
  • Verify whether any Windows hosts in your environment are affected, including legacy systems that may be harder to patch.
  • Prioritize remediation before the CISA due date associated with the KEV listing.
  • Check endpoint and identity logs for signs of privilege escalation activity on Windows systems.
  • Track exposure in your vulnerability management program and confirm closure after patching.

Evidence notes

Evidence in the supplied corpus is limited to official catalog and record metadata. CISA’s KEV entry names the issue as a Microsoft Windows privilege escalation vulnerability and marks it as known exploited, with dateAdded 2022-03-03 and dueDate 2022-03-24. The corpus also points to the official CVE record and NVD detail page, but provides no CVSS score or exploit specifics.

Sources and references

Verified primary and authoritative sources

  • CVE-2002-0367 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2002-0367

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2002-0367 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2002-0367

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

    cisa_kev

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.