CVE-2015-2553
HighSummary
The kernel in various versions of Windows mishandles junctions during mountpoint creation, allowing local users to gain elevated privileges by leveraging certain sandbox access.
Risk Assessment
This vulnerability may lead to privilege escalation, posing a threat to the integrity of the system and data within the organization.
Recommendation
It is recommended to update operating systems to the latest versions and apply relevant security patches.
Other vulnerabilities in Jądro systemu Windows
See all- CVE-2016-3306High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-3305High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-0180High
The kernel in various versions of Windows mishandles symbolic links, allowing local users to gain elevated privileges via a crafted application.
- CVE-2015-6174High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6173High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6171High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-2550High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Elevation of Privilege Vulnerability.'
- CVE-2015-2549High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Corruption Vulnerability.'
- CVE-2015-0075High
The kernel in Windows Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles junctions during mountpoint creation, which makes it easier for local users to gain privileges by leveraging certain sandbox access, aka "Windows Mount Point Elevation of Privilege Vulnerability."