2015-08-15 02:59:24 2019-05-17 14:35:06

The Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Shell Security Feature Bypass Vulnerability."

Vector

LOCAL

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Advisory Patch Confirmed Link
1033238
MS15-080
KB3054846 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3054890 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3055014 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072303 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072305 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072306 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072307 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072309 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072310 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3072311 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3075590 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3075591 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3075592 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3075593 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3078601 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3080333 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution KB3081434 | MS15-080 - Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution