NVD

Id
24558  
Name
CVE-2015-2527  
Description
The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-08  
Modified Date
2016-12-21  
Seq
2015-2527  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129487 24558 CVE-2015-2527 MS15-097  View
129488 24558 CVE-2015-2527 76599  View
129489 24558 CVE-2015-2527 1033485  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9332 JVNDB-2015-004652 複数の Microsoft Windows 製品のカーネルモードドライバ内の win32k.sys のプロセスの初期化の実装における権限昇格の脆弱性 複数の Microsoft Windows 製品のカーネルモードドライバ内の win32k.sys のプロセスの初期化の実装は、整合性レベルを適切に制御しないため、権限を取得される脆弱性が存在します。 CVE-2015-2527 79752 CVE-2015-2527 24558 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004652.html 2015-09-08 2015-09-10 View