CVE-2010-3888
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain...
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
Exploit likelihood
What each source reports
NVD Score used
7.2
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
- Record
CVE-2010-3888- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
- Record
CVE-2010-3888- Updated
- 2026-11-02
EUVDEUVD-2010-3866 No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
- Record
EUVD-2010-3866- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p33r-82vp-ffm4 No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain...
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers.
- Record
GHSA-p33r-82vp-ffm4- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows - Task Scheduler Privilege Escalation | 2010-11-20 |
| Exploit-DB | Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit) | 2012-07-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3888 is a high vulnerability (CVSS 7.2) in Microsoft Windows, published October 8, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.90%, the 90th percentile. No source names a fixed version.
References
virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716
virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml
securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
nvd.nist.gov/vuln/detail/CVE-2010-3888
github.com/advisories/GHSA-p33r-82vp-ffm4