CVE-2015-6173
HighSummary
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious operations by local users, posing a threat to the integrity and confidentiality of organizational data.
Recommendation
It is recommended to update systems to the latest versions that include security patches addressing this vulnerability. Additionally, monitoring and restricting local user access to critical system resources is advised.
Other vulnerabilities in Jądro systemu Windows
See all- CVE-2016-3306High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-3305High
The kernel in various versions of Windows mishandles session objects, allowing local users to hijack sessions and gain elevated privileges via a crafted application.
- CVE-2016-0180High
The kernel in various versions of Windows mishandles symbolic links, allowing local users to gain elevated privileges via a crafted application.
- CVE-2015-6174High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-6171High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Elevation of Privilege Vulnerability'.
- CVE-2015-2553High
The kernel in various versions of Windows mishandles junctions during mountpoint creation, allowing local users to gain elevated privileges by leveraging certain sandbox access.
- CVE-2015-2550High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Elevation of Privilege Vulnerability.'
- CVE-2015-2549High
The kernel in various versions of Windows allows local users to gain elevated privileges via a crafted application, known as 'Windows Kernel Memory Corruption Vulnerability.'
- CVE-2015-0075High
The kernel in Windows Server 2003 SP2, Vista SP2, Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, allowing local users to gain privileges via a crafted application.
Original NVD description (English source)
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-6171 and CVE-2015-6174.