CVE-2007-2229

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-12 · updated 2026-06-16
Weakness: CWE-264

Description

Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information Disclosure Vulnerability."

Affected products

Microsoft Windows Vista: all versions

References

http://osvdb.org/35344
http://secunia.com/advisories/25623
http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.securityfocus.com/bid/24411
http://www.securitytracker.com/id?1018225
http://www.us-cert.gov/cas/techalerts/TA07-163A.html
http://www.vupen.com/english/advisories/2007/2152
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-032
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1529
http://osvdb.org/35344
http://secunia.com/advisories/25623
http://www.securityfocus.com/archive/1/471947/100/0/threaded

Get alerted when CVE-2007-2229 or the next vulnerability affects your stack