CVE-2010-3889
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain...
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
- Record
CVE-2010-3889- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
- Record
CVE-2010-3889- Updated
- 2026-11-02
EUVDEUVD-2010-3867 No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
- Record
EUVD-2010-3867- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vccr-vg7g-h549 No score
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain...
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Microsoft researchers and other researchers.
- Record
GHSA-vccr-vg7g-h549- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3889 is a high vulnerability (CVSS 7.2) in Microsoft Windows, published October 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.61%, the 76th percentile. No source names a fixed version.
References
virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml
eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29
symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities
computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_
securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061
nvd.nist.gov/vuln/detail/CVE-2010-3889
github.com/advisories/GHSA-vccr-vg7g-h549