Microsoft Virtual Machine Manager CVE-2015-0012 Local Privilege Escalation Vulnerability

Description

Microsoft Virtual Machine Manager is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges.

Technologies Affected

• Microsoft System Center Virtual Machine Manager 2012 R2 UR4 (VMM Server update)

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
To exploit this vulnerability, an attacker requires local access to an affected computer. Grant local access for trusted and accountable users only.

Updates are available. Please see the references or vendor advisory for more information.