CVE-2009-0079 — The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."

Back Back to CVE browser

MEDIUM

The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."

Published Apr 15, 2009

6.9

MEDIUM

CVSS 2.0

EPSS 4.06%

Description

The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by accessing the resources of one of the processes, aka "Windows RPCSS Service Isolation Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Metrics

4.06% 0.04064

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.04064

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	4.06% (0.04064)	90.35th	v5 (v2026.06.15)
Jun 15, 2026	4.06% (0.04064)	89.31th	v5 (v2026.06.15)
Mar 17, 2025	0.62% (0.00619)	68.21th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00044)	12.38th	v3 (v2023.03.01)
Jun 13, 2024	0.04% (0.00044)	10.49th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00044)	8.47th	v3 (v2023.03.01)
Mar 6, 2023	2.22% (0.02220)	81.24th	v2 (v2022.01.01)
Jul 18, 2022	2.22% (0.02220)	80.16th	v2 (v2022.01.01)
Jul 17, 2022	1.92% (0.01924)	76.86th	v2 (v2022.01.01)
Apr 1, 2022	2.22% (0.02220)	79.43th	v2 (v2022.01.01)
Feb 4, 2022	2.22% (0.02220)	58.07th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (6)

http://osvdb.org/53667
vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1022044
vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/1026
vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://osvdb.org/53667		vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id?1022044		vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA09-104A.html		third-party-advisoryx_refsource_CERTUS Government Resource
http://www.vupen.com/english/advisories/2009/1026		vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6147		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 15, 2009

Updated Aug 7, 2024

Reserved Jan 8, 2009

Link CVE-2009-0079

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0079

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0079