CVE-2015-0075
HighSummary
The kernel in Windows Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
Risk Assessment
This vulnerability may lead to unauthorized privilege escalation by local users, posing a significant security risk to the system.
Recommendation
It is recommended to update the system to the latest version to patch this vulnerability and to restrict access for local users who may run untrusted applications.
Other vulnerabilities in Jądro systemu Windows
See all- CVE-2016-3306High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-3305High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-0180High
The kernel in various versions of Windows mishandles symbolic links, allowing local users to gain elevated privileges via a crafted application.
- CVE-2015-6174High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6173High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6171High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-2553High
The kernel in various versions of Windows mishandles junctions during mountpoint creation, allowing local users to gain elevated privileges by leveraging certain sandbox access.
- CVE-2015-2550High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Elevation of Privilege Vulnerability.'
- CVE-2015-2549High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Corruption Vulnerability.'
Original NVD description (English source)
The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Impersonation Level Check Elevation of Privilege Vulnerability."