CVE-2002-2132: Microsoft Windows 2000

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2002-12-31. Last modified 2026-06-16.