CVE-2015-2552: microsoft windows_10 7PK - Security Features

Vulnerability summary

CVE-2015-2552 is a high (CVSS 7.2) 7PK - Security Features vulnerability in microsoft windows_10. EPSS estimates a 1.56% chance of exploitation in the next 30 days, higher than 74.8% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-10-2015
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows physically proximate attackers to bypass the Trusted Boot protection mechanism, and consequently interfere with the integrity of code, BitLocker, Device Encryption, and Device Health Attestation, via a crafted Boot Configuration Data (BCD) setting, aka "Trusted Boot Security Feature Bypass Vulnerability."

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.