Remote Procedure Call Vulnerability in Microsoft Windows

CVE-2015-2370

Summary

The vulnerability affects the authentication implementation within the RPC subsystem of various Microsoft Windows operating systems. It allows local users to exploit DCE/RPC connection reflection, potentially leading to unauthorized privilege escalation via a specially crafted application. This weakness can be leveraged by malicious actors to gain elevated rights on affected systems, thereby posing a significant security risk.

References