Windows 10^H^H Symbolic Link Mitigations

🗓️ 25 Aug 2015 00:00:00Reported by GoogleProjectZeroType

googleprojectzero🔗 googleprojectzero.blogspot.com👁 53 Views

Windows 10 Symbolic Link Mitigations research and backport for Windows Vista. Changes in Windows 10 and back ported to older versions. Three types of symbolic links: Object Manager, Registry Key, and NTFS Mount Points. Object Manager symbolic links abused for file attacks. Registry Key symbolic links bypass security check

Reporter	Title	Published	Views	Family All 71
Tenable Nessus	Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)	16 Sep 201400:00	–	nessus
Tenable Nessus	Adobe Reader < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)	16 Sep 201400:00	–	nessus
Tenable Nessus	MS14-071: Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607)	12 Nov 201400:00	–	nessus
Tenable Nessus	MS15-009: Security Update for Internet Explorer (3034682)	5 Jun 201500:00	–	nessus
Tenable Nessus	MS15-090: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3060716)	11 Aug 201500:00	–	nessus
BDU FSTEC	The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Adobe Reader software, which allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
CNVD	Microsoft Internet Explorer Remote Elevation of Privilege Vulnerability (CNVD-2015-01089)	11 Feb 201500:00	–	cnvd
CNVD	Microsoft Windows Object Manager Local Elevation of Privilege Vulnerability	14 Aug 201500:00	–	cnvd
CNVD	Microsoft Windows Registry Remote Elevation of Privilege Vulnerability	14 Aug 201500:00	–	cnvd

25 Aug 2015 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 210

EPSS0.12974