7.2

CVE-2015-2527

Exploit

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 Version-
Microsoft ≫ Windows 8 Version-
Microsoft ≫ Windows 8.1 Version-
Microsoft ≫ Windows Rt Version-
Microsoft ≫ Windows Rt 8.1 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.32% 0.946
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
http://www.securitytracker.com/id/1033485
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/76599
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/38199/
Third Party Advisory
Exploit
VDB Entry