What’s Vulnerable › Vulnerabilities

CVE-2001-0015

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-05-07 · updated 2026-06-16

Description

Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.

Affected products

• Microsoft Windows 2000: all versions

References

• http://www.atstake.com/research/advisories/2001/a020501-1.txt
• http://www.securityfocus.com/bid/2341
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6062
• http://www.atstake.com/research/advisories/2001/a020501-1.txt
• http://www.securityfocus.com/bid/2341
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6062

Get alerted when CVE-2001-0015 or the next vulnerability affects your stack