Lucene search
MicrosoftCVE-2015-2554HistoryOct 14, 2015 - 1:59 a.m.
CVE-2015-2554
2015-10-1401:59:09
CWE-264
microsoft
web.nvd.nist.gov
73
microsoft
windows
vulnerability
local privilege escalation
cve-2015-2554
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
21.8%
The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka “Windows Object Reference Elevation of Privilege Vulnerability.”
Affected configurations
Node
microsoftwindows_10Match-
ORmicrosoftwindows_7Match-sp1
ORmicrosoftwindows_8Match-
ORmicrosoftwindows_8.1Match-
ORmicrosoftwindows_rtMatch-
ORmicrosoftwindows_rt_8.1Match-
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2sp1itanium
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_vistaMatch-sp2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10 | - | cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* |
| microsoft | windows_7 | - | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* |
| microsoft | windows_8 | - | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:* |
| microsoft | windows_8.1 | - | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_rt | - | cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:* |
| microsoft | windows_rt_8.1 | - | cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* |
| microsoft | windows_server_2012 | - | cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* |
Related
prion
prion
Privilege escalation
2015-10-14 01:59:00
exploitpack
exploitpack
symantec
symantec
cvelist
cvelist
CVE-2015-2554
2015-10-14 01:00:00
nvd
nvd
CVE-2015-2554
2015-10-14 01:59:09
exploitdb
exploitdb
nessus
nessus
openvas
openvas
Microsoft Windows Privilege Elevation Vulnerabilities (3096447)
2015-10-14 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA10674 Multiple vulnerabilities in Microsoft Windows
2015-10-12 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-10-25 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
21.8%
Related for CVE-2015-2554