CVE-2015-2527
published 2015-09-09CVE-2015-2527: The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2…
PriorityP342high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
7.04%
93.4th percentile
The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_server_2012 | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w6j5-fvc8-44j6: The process-initialization implementation in win32k
ghsa_unreviewed·2022-05-14
CVE-2015-2527 [HIGH] GHSA-w6j5-fvc8-44j6: The process-initialization implementation in win32k
The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Red Hat
RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass
vendor_redhat·2015-09-15·CVSS 7.5
CVE-2015-5201 [HIGH] CWE-20 RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass
RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows remote attackers to log in without authentication via unspecified vectors.
Statement: This issue was fixed in RHSA-2015-2527 (https://rhn.redhat.com/errata/RHEA-2015-2527.html) in the rhev-hypervisor package.
Package: vdsm (Red Hat Enterprise Virtualization 3) - Affected
Package: vdsm (Red Hat Gluster Storage 3.1) - Under investigation
Package: vdsm (Red Hat Storage 2.1) - Will not fix
No detection rules found.
http://www.securityfocus.com/bid/76599http://www.securitytracker.com/id/1033485https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-097https://www.exploit-db.com/exploits/38199/http://www.securityfocus.com/bid/76599http://www.securitytracker.com/id/1033485https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-097https://www.exploit-db.com/exploits/38199/
2015-09-09
Published