CVE-2015-1674

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the KASLR protection mechanism, and consequently discover the cng.sys base address, via a crafted application, aka "Windows Kernel Security Feature Bypass Vulnerability."

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.33% chance of exploitation in the next 30 days, 88th percentile

Published

2015-05-13

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37052

References

• CVE Record
• NVD entry

Related

• CVE-2015-1641
• CVE-2015-1676
• CVE-2015-1635
• CVE-2015-1677
• CVE-2015-1592
• CVE-2015-1678