CVE-2011-0030 — The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023

Back Back to CVE browser

MEDIUM

The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023

Published Feb 9, 2011

4.7

MEDIUM

CVSS 2.0

EPSS 1.76%

Description

The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.76% 0.01764

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01764

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.76% (0.01764)	77.22th	v5 (v2026.06.15)
Jun 15, 2026	1.76% (0.01764)	75.06th	v5 (v2026.06.15)
Mar 17, 2025	0.38% (0.00376)	57.11th	v4 (v2025.03.14)
Dec 12, 2024	0.05% (0.00050)	21.63th	v3 (v2023.03.01)
Apr 23, 2023	0.05% (0.00052)	18.33th	v3 (v2023.03.01)
Mar 7, 2023	0.07% (0.00074)	30.05th	v3 (v2023.03.01)
Mar 6, 2023	2.02% (0.02016)	79.31th	v2 (v2022.01.01)
Apr 1, 2022	2.02% (0.02016)	77.46th	v2 (v2022.01.01)
Feb 4, 2022	2.02% (0.02016)	56.42th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (7)

http://osvdb.org/70826
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43250
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securitytracker.com/id?1025045
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2011/0323
vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-010
vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/64917
vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12476
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://osvdb.org/70826		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/43250		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securitytracker.com/id?1025045		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2011/0323		vdb-entryx_refsource_VUPEN
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-010		vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/64917		vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12476		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Feb 9, 2011

Updated Aug 6, 2024

Reserved Dec 10, 2010

Link CVE-2011-0030

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-0030

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-0030