CVE-2006-5758: Microsoft Windows 2000

High severity, CVSS 7.2. EPSS: 6.5% chance of exploitation in the next 30 days.

The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2006-11-06. Last modified 2026-06-16.