CVE-2015-0078

Published: Mar 11, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate the token of a calling thread, which allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

Affected (6)

Products: Microsoft: Windows 8, Windows 8.1, Windows Rt, Windows Rt 8.1, Windows Server 2012

5 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 8	All versions
Microsoft Windows 8.1	All versions
Microsoft Windows Rt	All versions
Microsoft Windows Rt 8.1	All versions
Microsoft Windows Server 2012	All versions
Microsoft Windows Server 2012	Version r2