CVE-2006-6797: Microsoft Windows XP

Medium severity, CVSS 6.6. EPSS: 7.2% chance of exploitation in the next 30 days.

The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (crash) or read arbitrary memory from csrss.exe via crafted arguments to the NtRaiseHardError function with status 0x50000018, a different vulnerability than CVE-2006-6696.

Affected products

• Microsoft Windows XP: any version

Published 2006-12-28. Last modified 2026-06-16.