CVE-2010-3889

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-08 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.

Affected products

Microsoft Corporation Windows: all versions

References

http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29
http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml
http://www.computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29
http://www.securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
http://www.symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
http://www.virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml

Get alerted when CVE-2010-3889 or the next vulnerability affects your stack