CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability

Beschreibung

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• http://twitter.com/symantec/statuses/590208710527549440 Press/Media Coverage
• 37049 exploitExploitThird Party AdvisoryVDB Entry
• 74245 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• MS15-051 vendor-advisoryPatchVendor Advisory
• 37367 exploitExploitThird Party AdvisoryVDB Entry
• https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html Third Party Advisory
• 1032155 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• 20200514 KL-001-2020-002 : Cellebrite Restricted Desktop Escape and Escalation of User Privilege mailing-listBroken LinkMailing ListThird Party Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1701 US Government Resource