CVE-2009-1123VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2009-1123: Microsoft Windows Improper Input Validation Vulnerability
Affects Microsoft WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/24/2022
- EPSS
- 4.9% chance of exploitation in 30 days – higher than 92% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2009-1123 is a vulnerability in the Microsoft Windows kernel where improper input validation allows local users to gain elevated privileges by using a crafted application. This flaw affects the kernel's handling of certain unspecified kernel objects. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected Windows versions or patch information is provided in the available data.