CVEvulnerability
CVE-2015-0001
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability."
Affected configurations
• microsoft windows 8
• microsoft windows 8.1
• microsoft windows rt
• microsoft windows rt 8.1
• microsoft windows server 2012
• microsoft windows server 2012 r2
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html packetstormsecurity.com
- http://secunia.com/advisories/62134 secunia.com
- http://www.securityfocus.com/bid/71927 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99513 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99514 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html packetstormsecurity.com
- http://secunia.com/advisories/62134 secunia.com
- http://www.securityfocus.com/bid/71927 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99513 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99514 exchange.xforce.ibmcloud.com