CVE-2004-2091: Microsoft Baseline Security Analyzer

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.

Affected products

• Microsoft Baseline Security Analyzer: version 1.2 only

Published 2004-02-10. Last modified 2026-06-16.