CVE-2005-2827: microsoft windows_nt
Vulnerability summary
CVE-2005-2827 is a high (CVSS 7.2) vulnerability in microsoft windows_nt. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 14-12-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.63%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.63% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- windows_nt4.0
1 vendor · 1 product
References
16 links- docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-055Vendor AdvisoryX Refsource MS
- support.avaya.com/elmodocs2/security/ASA-2005-234.pdfX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1583VDB EntrySignatureX Refsource OVAL