CVE-2010-1886

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by leveraging access to a process with NetworkService credentials, as demonstrated by TAPI Server, SQL Server, and IIS processes, and related to the Windows Service Isolation feature. NOTE: the vendor states that privilege escalation from NetworkService to LocalSystem does not cross a "security boundary."

• CWE-264

• http://support.microsoft.com/kb/2264072Patch, Vendor Advisory
• http://support.microsoft.com/kb/982316Patch, Vendor Advisory
• http://www.microsoft.com/technet/security/advisory/2264072.mspxVendor Advisory
• http://support.microsoft.com/kb/2264072Patch, Vendor Advisory
• http://support.microsoft.com/kb/982316Patch, Vendor Advisory
• http://www.microsoft.com/technet/security/advisory/2264072.mspxVendor Advisory

Published

Aug 16, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1880Unspecified vulnerability in Quartz.dll for DirectShow on Mi…
• CVE-2010-1881The FieldList ActiveX control in the Microsoft Access Wizard…
• CVE-2010-1882Multiple buffer overflows in the MPEG Layer-3 Audio Codec fo…
• CVE-2010-1883Integer overflow in the Embedded OpenType (EOT) Font Engine …7.8
• CVE-2010-1884Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-1885The MPC::HexToNum function in helpctr.exe in Microsoft Windo…
• CVE-2010-1887The Windows kernel-mode drivers in win32k.sys in Microsoft W…
• CVE-2010-1888Race condition in the kernel in Microsoft Windows XP SP3 all…
• CVE-2010-1889Double free vulnerability in the kernel in Microsoft Windows…7.8
• CVE-2010-1890The kernel in Microsoft Windows Vista SP1 and SP2, Windows S…
• CVE-2010-1891The Client/Server Runtime Subsystem (aka CSRSS) in the Win32…
• CVE-2010-1892The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Win…