CVE-2015-2430

CVE-2015-2430 describes a Windows sandbox-elevation vulnerability affecting multiple OS versions (Vista SP2, Windows 7 SP1, Windows 8/8.1, Server 2008/2012 variants, RT). The initial report notes a sandbox bypass enabling unspecified filesystem actions via a crafted application. Connected documen...

MS15-090: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3060716)

The remote Windows host is affected by multiple elevation of privilege vulnerabilities in Windows Object Manager : - A flaw exists in Windows Object Manager due to a failure to properly validate and enforce impersonation levels. A remote, authenticated attacker can exploit this vulnerability, via...