Unscored severity · published Jul 14, 2015
CVE-2015-2362
Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures,…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka "Hyper-V System Data Structure Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W8
Windows 8 · Microsoft
All versions, or not specified · source: NVD
W8
Windows 8.1 · Microsoft
All versions, or not specified · source: NVD
WS
Windows Server 2008 · Microsoft
r2 · source: NVD
WS
Windows Server 2012 · Microsoft
r2; r2; r2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2362
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2362
www.securitytracker.com
http://www.securitytracker.com/id/1032897
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-068
More from Windows 8
9.8
CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability
8.8
CVE-2015-2426
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
8.8
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
8.8
CVE-2014-6324
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
8.8
CVE-2014-6332
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability