CVE-2015-6113 — Microsoft Windows 10 vulnerability

CWE-2546 documents5 sources
Severity
2.1LOWNVD
EPSS
0.3%
top 46.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Windows 10Microsoft Windows Server 2008Microsoft Windows Server 2012
Timeline
PublishedNov 11
Latest updateMay 14

Description

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass intended filesystem permissions by leveraging Low Integrity access, aka "Windows Kernel Security Feature Bypass Vulnerability."

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-vvhh-fqp8-76rf: The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8↗2022-05-14
▶
Project0
Between a Rock and a Hard Link - Project Zero↗2015-12-01
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - November 2015↗2015-11-10
▶
Talos
Microsoft Patch Tuesday - November 2015↗2015-11-10
▶

💬Community

1
Bugzilla
CVE-2015-7528 OpenShift: pod log location must validate container if provided↗2015-11-30
▶