CVE-2009-1127

CVE-2009-1127 is a critical vulnerability in the win32k.sys kernel component of various Microsoft Windows operating systems, including Windows 2000, XP, Server 2003, Vista, and Server 2008. It allows a local attacker to achieve privilege escalation by exploiting a NULL pointer dereference through a specially crafted application. This vulnerability has a CVSS score of 7.2, indicating high severity. Its attack vector is local with low attack complexity, meaning an authenticated user on the system can easily trigger it to gain full control over the affected system (confidentiality, integrity, and availability impacts are all high). Despite its severity, there is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage. The vulnerability is also not listed in CISA's Known Exploited Vulnerabilities Catalog.