CVE-2009-0079

CVE-2009-0079 describes a privilege escalation vulnerability in the RPCSS service affecting Microsoft Windows XP SP2/SP3 and Server 2003 SP1/SP2. The flaw stems from improper isolation between processes running under the NetworkService or LocalService accounts, allowing local users to gain elevated privileges by accessing other process resources. With a CVSS score of 6.9, this vulnerability has a local attack vector and medium attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an exploit is available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.