CVSS: 7.3EPSS: 1%CPEs: 2EXPL: 2CVE-2015-2508 – Microsoft Windows 10 (Build 10130) - User Mode Font Driver Thread Permissions Privilege Escalation
https://notcve.org/view.php?id=CVE-2015-2508
09 Sep 2015 — The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application, aka "Font Driver Elevation of Privilege Vulnerability." Vulnerabilidad en Adobe Type Manager Library en Microsoft Windows 10, permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como 'Font Driver Elevation of Privilege Vulnerability.' • https://packetstorm.news/files/id/133612 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 1%CPEs: 12EXPL: 2CVE-2015-2511 – Microsoft Windows Kernel - 'FlashWindowEx' Memory Corruption (MS15-097)
https://notcve.org/view.php?id=CVE-2015-2511
09 Sep 2015 — Vulnerabilidad en el controlador kernel-mode en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT Gold and 8.1 y Windows 10, permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como 'Win32k Memory Corruption Elevation of Privilege Vulnerability,' una vulnerabilidad diferente a CVE-2015-2517, CVE-2015-2518 y CV... • https://packetstorm.news/files/id/133671 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.3EPSS: 2%CPEs: 12EXPL: 4CVE-2015-2512 – Microsoft Windows Kernel - 'NtGdiBitBlt' Buffer Overflow (MS15-097)
https://notcve.org/view.php?id=CVE-2015-2512
09 Sep 2015 — The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Font Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2507. Vulnerabilidad en Adobe Type Manager Library en Microsoft Windows
CVSS: 7.8EPSS: 1%CPEs: 12EXPL: 2CVE-2015-2517 – Microsoft Windows Kernel - Use-After-Free with Cursor Object (MS15-097)
https://notcve.org/view.php?id=CVE-2015-2517
09 Sep 2015 — Vulnerabilidad en el controlador kernel-mode en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT Gold y 8.1 y Windows 10, permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como 'Win32k Memory Corruption Elevation of Privilege Vulnerability,' una vulnerabilidad diferente a CVE-2015-2511, CVE-2015-2518 y CVE-... • https://packetstorm.news/files/id/133666 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 1%CPEs: 12EXPL: 2CVE-2015-2518 – Microsoft Windows Kernel - 'bGetRealizedBrush' Use-After-Free (MS15-097)
https://notcve.org/view.php?id=CVE-2015-2518
09 Sep 2015 — Vulnerabilidad en el controlador kernel-mode en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold y R2, Windows RT Gold y 8.1 y Windows 10, permite a usuarios locales obtener privilegios a través de una aplicación manipulada, también conocida como 'Win32k Memory Corruption Elevation of Privilege Vulnerability,' una vulnerabilidad diferente a CVE-2015-2511, CVE-2015-2517 y CVE-... • https://packetstorm.news/files/id/133667 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 4CVE-2015-5465 – SiS Windows VGA Display Manager 6.14.10.3930 - Write-What-Where (PoC)
https://notcve.org/view.php?id=CVE-2015-5465
02 Sep 2015 — Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allows local users to gain privileges via a crafted (1) 0x96002400 or (2) 0x96002404 IOCTL call. Vulnerabilidad en Silicon Integrated Systems WindowsXP Display Manager (también conocido como VGA Driver Manager y VGA Display Manager) 6.14.10.3930, permite a usuarios locales obtener privilegios a través de una llamada IOCTL (1) 0x96002400 o (2) 0x96002404 manipulada. • http://packetstormsecurity.com/files/133399/SiS-Windows-VGA-Display-Manager-Privilege-Escalation.html •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 4CVE-2015-5466 – XGI Windows VGA Display Manager 6.14.10.1090 - Arbitrary Write (PoC)
https://notcve.org/view.php?id=CVE-2015-5466
02 Sep 2015 — Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call. Silicon Integrated Systems XGI WindowsXP Display Manager (también se conoce como XGI VGA Driver Manager y VGA Display Manager) versión 6.14.10.1090, permite a usuarios locales alcanzar privilegios por medio de una llamada IOCTL 0x96002404 diseñada. • http://packetstormsecurity.com/files/133400/XGI-Windows-VGA-Display-Manager-Privilege-Escalation.html • CWE-269: Improper Privilege Management •
CVSS: 7.8EPSS: 4%CPEs: 1EXPL: 4CVE-2015-5736 – Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2015-5736
02 Sep 2015 — The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call. Vulnerabilidad en el driver Fortishield.sys en Fortinet FortiClient en versiones anteriores a 5.2.4, permite a usuarios locales ejecutar código arbitrario con privilegios de kernel mediante el establecimiento de la función callback en llamada ioctl en (1) 0x220024 o (2) 0x220028. • https://packetstorm.news/files/id/148811 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 49%CPEs: 11EXPL: 2CVE-2015-2432 – Microsoft Windows - 'ATMFD.DLL' Write to Uninitialized Address Due to Malformed CFF Table
https://notcve.org/view.php?id=CVE-2015-2432
15 Aug 2015 — ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability." Vulnerabilidad en ATMFD.DLL en Windows Adobe Type Manager Library en Microsoft Windows Vista SP2,
CVSS: 3.3EPSS: 14%CPEs: 12EXPL: 2CVE-2015-2433 – Microsoft Windows - Font Driver Buffer Overflow (MS15-078)
https://notcve.org/view.php?id=CVE-2015-2433
15 Aug 2015 — The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Kernel ASLR Bypass Vulnerability." Vulnerabilidad en el kernel en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Window... • https://github.com/vlad902/hacking-team-windows-kernel-lpe • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •