CVE

Id
77341  
CVE No.
CVE-2015-0078  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate the token of a calling thread, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
708116 77341 CVE-2015-0078 MS:MS15-023  View
708117 77341 CVE-2015-0078 URL:http://technet.microsoft.com/security/bulletin/MS15-023  View
708118 77341 CVE-2015-0078 BID:72902  View
708119 77341 CVE-2015-0078 URL:http://www.securityfocus.com/bid/72902  View
708120 77341 CVE-2015-0078 SECTRACK:1031897  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8541 JVNDB-2015-003861 複数の IBM Rational 製品の Jazz Foundation の Jazz Team Server におけるクロスサイトスクリプティングの脆弱性 複数の IBM Rational 製品の Jazz Foundation の Jazz Team Server には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0130 77341 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003861.html  View