CVE-2006-2371 [High] | Memory Corruption in Windows 2000

CVE-2006-2371 is rated High Risk (66.9/100): CVSS High severity, with high exploitation likelihood (EPSS 38.61%, 97th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +2.85% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-03-31	35.76%	38.61%	+2.85%
2	2026-03-11	42.22%	35.76%	-6.46%
3	2026-02-28	—	42.22%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-03-31

35.76%

38.61%

+2.85%

2026-03-11

42.22%

35.76%

-6.46%

2026-02-28

—

42.22%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
7.5	2.0	HIGH	`AV:N/AC:L/Au:N/C:P/I:P/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:P) Partial availability impact.	10.0	6.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

7.5

2.0

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:P): Partial availability impact.

10.0

6.4

[email protected]

Affected software / configurations for CVE-2006-2371

Vendor	Product	Version	Raw CPE
microsoft	windows_2000	—	cpe:2.3:o:microsoft:windows_2000::::::::
microsoft	windows_2000	—	cpe:2.3:o:microsoft:windows_2000::sp1::::::*
microsoft	windows_2000	—	cpe:2.3:o:microsoft:windows_2000::sp2::::::*
microsoft	windows_2000	—	cpe:2.3:o:microsoft:windows_2000::sp3::::::*
microsoft	windows_2000	—	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
microsoft	windows_2003_server	datacenter_edition	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:::::::*
microsoft	windows_2003_server	datacenter_edition	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1::::::
microsoft	windows_2003_server	datacenter_edition_64-bit	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:::::::*
microsoft	windows_2003_server	datacenter_edition_64-bit	cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1::::::
microsoft	windows_2003_server	enterprise_64-bit	cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:::::::*
microsoft	windows_2003_server	enterprise_edition	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1::::::
microsoft	windows_2003_server	enterprise_edition_64-bit	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:::::::*
microsoft	windows_2003_server	enterprise_edition_64-bit	cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1::::::
microsoft	windows_2003_server	r2	cpe:2.3:o:microsoft:windows_2003_server:r2::datacenter_64-bit:::::
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1::enterprise:::::
microsoft	windows_2003_server	standard	cpe:2.3:o:microsoft:windows_2003_server:standard:::::::*
microsoft	windows_2003_server	standard	cpe:2.3:o:microsoft:windows_2003_server:standard:sp1::::::
microsoft	windows_2003_server	standard_64-bit	cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:::::::*
microsoft	windows_2003_server	web	cpe:2.3:o:microsoft:windows_2003_server:web:::::::*
microsoft	windows_2003_server	web	cpe:2.3:o:microsoft:windows_2003_server:web:sp1::::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp:::home:::::*
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp:::media_center:::::*
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::gold:professional:::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::sp1:home:::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::sp1:media_center:::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::sp2:home:::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::sp2:media_center:::::
microsoft	windows_xp	—	cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::

References for CVE-2006-2371

URL	Tags
http://secunia.com/advisories/20630	Patch Vendor Advisory
http://securityreason.com/securityalert/1096
http://securitytracker.com/id?1016285
http://www.kb.cert.org/vuls/id/814644	US Government Resource
http://www.osvdb.org/26436
http://www.securityfocus.com/archive/1/436977/100/0/threaded
http://www.securityfocus.com/bid/18358	Patch
http://www.us-cert.gov/cas/techalerts/TA06-164A.html	US Government Resource
http://www.vupen.com/english/advisories/2006/2323
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-025
https://exchange.xforce.ibmcloud.com/vulnerabilities/26814
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1674
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1846
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1851
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1857
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1907
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1983

URL

CVE-2006-2371

Exploit prediction scoring system (EPSS) score for CVE-2006-2371

Common vulnerability scoring system (CVSS) metrics for CVE-2006-2371

Weakness enumeration for CVE-2006-2371

Affected software / configurations for CVE-2006-2371

References for CVE-2006-2371