Skip to content

CVE-2015-1674 The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the K...

MediumCVSS 4.6 EPSS 3.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate an unspecified address, which allows local users to bypass the KASLR protection mechanism, and consequently discover the cng.sys base address, via a crafted application, aka "Windows Kernel Security Feature Bypass Vulnerability."

Affected products

ProductAffected versionsFixed in
Microsoft windows 8 All versions No fix listed
Microsoft windows 8.1 All versions No fix listed
Microsoft windows rt All versions No fix listed
Microsoft windows rt 8.1 All versions No fix listed
Microsoft Windows Server 2012 All versions No fix listed
Microsoft Windows Server 2012 = r2 No fix listed

References

  • 74488 third-party-advisory vdb-entry
  • 1032292 third-party-advisory vdb-entry
  • MS15-052 patch vendor-advisory
  • 37052 exploit third-party-advisory vdb-entry