Privileges escalation in Microsoft products

Description

Multiple improper impersonation levels handling were found in Microsoft products. By exploiting these vulnerabilities malicious users can gain privileges. These vulnerabilities can be exploited locally via a specially designed application.

Original advisories

• MS15-038

• CVE-2015-1643
• CVE-2015-1644

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Windows-Vista-4
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-Server-2003
• Windows-RT

CVE list

• CVE-2015-1643
  high
• CVE-2015-1644
  high

KB list

• 3045999
• 3045685

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com