CVE-2003-0909: Microsoft Windows XP

High severity, CVSS 7.2. EPSS: 20.9% chance of exploitation in the next 30 days.

Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."

Affected products

• Microsoft Windows XP: any version

Published 2004-06-01. Last modified 2026-06-16.