What’s Vulnerable › Vulnerabilities

CVE-2011-4434

• Severity: low (CVSS 3.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-11-11 · updated 2026-06-16
• Weakness: CWE-264

Description

Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to bypass intended access restrictions via a (1) macro or (2) scripting feature in an application, as demonstrated by Microsoft Office applications and the SANDBOX_INERT and LOAD_IGNORE_CODE_AUTHZ_LEVEL flags.

Affected products

• Microsoft Windows 7: all versions
• Microsoft Windows Server 2008: r2, r2-sp1

References

• http://support.microsoft.com/kb/2532445
• http://support.microsoft.com/kb/2532445

Get alerted when CVE-2011-4434 or the next vulnerability affects your stack