The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not prope…

published 2010-12-16 15y ago modified 2026-06-16 4mo ago also EUVD-2010-3938

cvss: 7.2; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.5%; EPSS 1.5% chance of exploitation in 30 days, percentile 74%
public exploits: 0; none known

The Consent User Interface (UI) in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka "Consent UI Impersonation Vulnerability."

Is CVE-2010-3961 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

1.53% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-264 Permissions, Privileges, and Access Controls

References

docs.microsoft.com /en-us/security-updates/securitybulletins/2010/ms10-100
vendor-advisory
secunia.com /advisories/42614
third-party-advisory, vendor-advisory
vupen.com /english/advisories/2010/3222
vdb-entry, vendor-advisory
us-cert.gov /cas/techalerts/TA10-348A.html
third-party-advisory, us-government-resource
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12323
vdb-entry, signature
securitytracker.com /id?1024882
vdb-entry
securityfocus.com /bid/45318
vdb-entry
osvdb.org /69824
vdb-entry

Sources

CVE List CVE-2010-3961
NVD CVE-2010-3961

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.