VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 9, 2015· Updated Jun 17, 2026

CVE-2015-2524

CVE-2015-2524

Description

Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Task Management Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2528.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Microsoft/Windows 10 1909
    cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
  • Microsoft/Windows 82 versions
    cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows 8.12 versions
    cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows Rt 8.12 versions
    cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20123 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Windows RTllm-fuzzy
  • Microsoft/Windows 10llm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.