First published: Tue Jul 14 2015(Updated: )
win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2382.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.0 | ||
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows RT | ||
Microsoft Windows Server | ||
Microsoft Windows Server | =r2 | |
Microsoft Windows Server | =r2 | |
Microsoft Windows Server | =r2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-2381 has a severity rating classified as important by Microsoft.
To fix CVE-2015-2381, apply the latest security updates provided by Microsoft for your affected operating system.
CVE-2015-2381 affects Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows RT, and Windows Server 2012.
CVE-2015-2381 allows local users to obtain sensitive information from kernel memory.
There are no specific workarounds recommended for CVE-2015-2381 apart from applying the security updates.