CVE-2015-2362: microsoft windows_8 7PK - Security Features

Vulnerability summary

CVE-2015-2362 is a high (CVSS 7.2) 7PK - Security Features vulnerability in microsoft windows_8. EPSS estimates a 1.62% chance of exploitation in the next 30 days, higher than 75.7% of scored vulnerabilities.

Timeline

1. 14-07-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka "Hyper-V System Data Structure Vulnerability."

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.