CVE-2002-1762: Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and...

Security readout for executives and security teams

MBSA 1.0 saved security scan results as plaintext in a predictable user folder. Those reports could reveal weaknesses and system details. The disclosed risk is information exposure, not direct system takeover, but the data could help an attacker plan later attacks. Likely limited to legacy Windows environments where MBSA 1.0 was used and scan reports remain in user profiles. Exposure depends on local report presence and interaction with malicious active content. Prioritize this as a legacy hygiene and information-protection issue. It is not presented as actively exploited in the sources, but exposed scan results can give attackers a useful roadmap of known weaknesses. Mitigation focus: Inventory any remaining MBSA 1.0 usage and stored scan reports.; Remove unneeded plaintext scan reports from user profiles.; Restrict file permissions around retained security scan outputs..

Prepared

Jun 29, 2026, 19:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.