What’s Vulnerable › Vulnerabilities

CVE-2010-3888

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-10-08 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.

Affected products

• Microsoft Corporation Windows: all versions

References

• http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
• http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716
• http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
• http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
• http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
• http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml
• http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
• http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716
• http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
• http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
• http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
• http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml

Get alerted when CVE-2010-3888 or the next vulnerability affects your stack