CVE-2006-2373

The record

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-41974 Permission control vulnerability in service notifications. Impact: Successful… CWE-264
• CVE-2026-9368 A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. CWE-264
• CVE-2026-41962 Permission control vulnerability in the app management and control module. Impact… CWE-264
• CVE-2026-6878 A vulnerability was identified in ByteDance verl up to 0.7.0. CWE-264
• CVE-2026-6224 A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. CWE-264
• CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. CWE-264
• CVE-2026-20046 A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR… CWE-264
• CVE-2019-10709 AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow… CWE-264