7.9 High
AI Score
Confidence
High
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
53.6%
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka “Mount Manager Elevation of Privilege Vulnerability.”
CPE | Name | Operator | Version |
---|---|---|---|
windows_7 | eq | - sp1 | |
windows_server_2008 | eq | r2 sp1 | |
windows_server_2008 | eq | r2 sp1 | |
windows_server_2008 | eq | - sp2 | |
windows_server_2012 | eq | 2.0.114 | |
windows_vista | eq | - sp2 |