Microsoft Windows NtCreateTransactionManager Type Obfuscation Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists when Microsoft Windows fails to authenticate and execute the emulation layer. The vulnerability allows an authenticated attacker to bypass...

Microsoft Windows Privilege Elevation Vulnerabilities (3049576)

This host is missing an important security update according to Microsoft Bulletin MS15-038. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-1643

Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...

Type confusion

Microsoft Windows Server 2003 R2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted...

CVE-2015-1643

CVE-2015-1643 affects multiple Windows versions (Vista to Server 2012/R2, RT/RT 8.1, etc.). The root cause is NtCreateTransactionManager type confusion that fails to properly constrain impersonation levels, enabling a local unprivileged user to escalate to higher privileges via a crafted applicat...

MS15-038: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)

The remote Windows host is missing a security update. It is, therefore, affected by multiple privilege escalation vulnerabilities : - A elevation of privilege vulnerability exists due to NtCreateTransactionManager type confusion that allows an authenticated attacker to bypass impersonation-level...