CVE-2008-1436

CVE-2008-1436 is a critical-severity vulnerability in Microsoft Windows-nt with a CVSS 2.0 base score of 9.0. Its EPSS exploit-prediction score of 37% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-264.

Key facts

Description

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.

Frequently asked questions

What is CVE-2008-1436?
Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent attackers to gain privileges by using one service process to capture a resource from a second service process that has a LocalSystem privilege-escalation ability, related to improper management of the SeImpersonatePrivilege user right, as originally reported for Internet Information Services (IIS), aka Token Kidnapping.
How severe is CVE-2008-1436?
CVE-2008-1436 has a CVSS 2.0 base score of 9.0, rated critical severity.
Is CVE-2008-1436 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 37% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2008-1436?
CVE-2008-1436 primarily affects Microsoft Windows-nt. In total, 13 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2008-1436?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2008-1436 published?
CVE-2008-1436 was published on 2008-04-21 and last updated on 2026-06-16.

References

Affected products (13)

More vulnerabilities in Microsoft Windows-nt

All CVEs affecting Microsoft Windows-nt →

Other CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities

Browse all CWE-264 (Permissions, Privileges, and Access Controls) vulnerabilities →