Windows Kernel Memory Elevation of Privilege in Microsoft Products
CVE-2015-6100

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows 10
Vendor
CVE Published:
11 November 2015

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2015-6100?

The Windows kernel in various Microsoft operating systems allows local users to gain elevated privileges via a specially crafted application. This vulnerability could potentially enable an attacker with local access to execute arbitrary code at a higher privilege level, making it crucial for users and administrators to apply the necessary security patches to mitigate risks.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2015-6100 - Proof of Concept

References

https://www.exploit-db.com/exploits/38796/
exploitx_refsource_EXPLOIT-DB
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
https://blog.fortinet.com/2016/08/17/root-cause-analysis-...
x_refsource_MISC

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.