CVE-2015-2524

Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Task Management Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2528.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.47% chance of exploitation in the next 30 days, 88th percentile

Published

2015-09-09

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38202

References

• CVE Record
• NVD entry

Related

• CVE-2015-2523
• CVE-2015-2525
• CVE-2015-2521
• CVE-2015-2527
• CVE-2015-2520
• CVE-2015-2528