CVE-2015-0062
HighSummary
A vulnerability in Microsoft Windows allows local users to gain elevated privileges by exploiting incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege.
Risk Assessment
Organizations may be exposed to unauthorized access to system resources, potentially leading to serious security breaches.
Recommendation
It is recommended to update operating systems to the latest versions and implement appropriate security policies to mitigate the risk of this vulnerability.
Other vulnerabilities in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1
See all- CVE-2016-0101High
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects several versions of the operating system, including Windows 7, 8.1, 10, and Windows Server.
- CVE-2016-0098High
A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via crafted media content. This affects multiple versions of Windows, including Windows 7, 8.1, and 10.
Original NVD description (English source)
Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege, aka "Windows Create Process Elevation of Privilege Vulnerability."