{ "schema_version": "1.4.0", "id": "GHSA-vwvj-5284-m7cc", "modified": "2022-05-14T01:03:18Z", "published": "2022-05-14T01:03:18Z", "aliases": [ "CVE-2015-0062" ], "details": "Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege, aka \"Windows Create Process Elevation of Privilege Vulnerability.\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0062" }, { "type": "WEB", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-015" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100437" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100438" }, { "type": "WEB", "url": "http://secunia.com/advisories/62840" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/72458" }, { "type": "WEB", "url": "http://www.securitytracker.com/id/1031724" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-02-11T03:01:00Z" } }