CVE-2010-3223: Microsoft Windows Server 2008

High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days.

The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."

Affected products

• Microsoft Windows Server 2008: version r2 only

Published 2010-10-13. Last modified 2026-06-16.