CVE-2006-3648 in the critical feed json
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbit…
published 2006-08-09 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3643
- cvss
- 7.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 23.6%
- EPSS 23.6% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
Patch / fix
- kb.cert.org/vuls/id/411516 advisory
- us-cert.gov/cas/techalerts/TA06-220A.html advisory
Exploit prediction
23.55% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.6 | AV:N/AC:H/Au:N/C:C/I:C/A:C |
References
-
kb.cert.org
/vuls/id/411516
third-party-advisory, patch, us-government-resource
-
us-cert.gov
/cas/techalerts/TA06-220A.html
third-party-advisory, patch, us-government-resource
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2006/ms06-051
vendor-advisory
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A841
vdb-entry, signature
-
vupen.com
/english/advisories/2006/3216
vdb-entry
-
securityfocus.com
/bid/19384
vdb-entry
-
securitytracker.com
/id?1016661
vdb-entry
Sources
- CVE List CVE-2006-3648
- NVD CVE-2006-3648
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.