CVE-2005-2827: Microsoft Windows 2000

High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days.

The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only

Published 2005-12-14. Last modified 2026-06-16.