CVE-2015-2418: Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka "MSRT Race Condition Vulnerability."

Unscored severity · published Jul 20, 2015

CVE-2015-2418

Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka "MSRT Race Condition Vulnerability."

–

CVSS

1.5%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)1.5% · higher than 73% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Malicious Software Removal Tool · Microsoft

through 5.25 · source: NVD

Affected product

Malicious Software Removal Tool

Microsoft

All Malicious Software Removal Tool CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2015-2418

CVE.org

https://www.cve.org/CVERecord?id=CVE-2015-2418

packetstormsecurity.com

http://packetstormsecurity.com/files/163755/Microsoft-Windows-Malicious-Software-Removal-Tool-Privilege-Escalation.html

www.securitytracker.com

http://www.securitytracker.com/id/1032901

Patch

https://technet.microsoft.com/library/security/3074162

More from Malicious Software Removal Tool

–

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool (MSRT), Windows Defender, Security Essentials, Forefront Client…