Unscored severity · published Jan 13, 2015
CVE-2015-0001
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W8
Windows 8 · Microsoft
All versions, or not specified · source: NVD
W8
Windows 8.1 · Microsoft
All versions, or not specified · source: NVD
WR
Windows RT · Microsoft
All versions, or not specified · source: NVD
WR
Windows RT 8.1 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2012 · Microsoft
r2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0001
packetstormsecurity.com
http://packetstormsecurity.com/files/134392/Microsoft-Windows-8.1-Ahcache.sys-NtApphelpCacheControl-Privilege-Escalation.html
secunia.com
http://secunia.com/advisories/62134
www.securityfocus.com
http://www.securityfocus.com/bid/71927
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/99513
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/99514
More from Windows 8
9.8
CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability
8.8
CVE-2015-2426
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
8.8
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
8.8
CVE-2014-6324
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
8.8
CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability