CVE-2015-2429: Critical severity microsoft windows 7 vulnerability

Published Aug 15, 2015

Updated

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow attackers to bypass an application sandbox protection mechanism and perform unspecified registry actions via a crafted application, aka "Windows Registry Elevation of Privilege Vulnerability."

Affected Software

11 affected components

Microsoft Windows 7=sp1

Microsoft Windows 8

Microsoft Windows 8.1

Microsoft Windows RT

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Vista=sp2

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-090

Event History

Aug 15, 2015

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2429?

CVE-2015-2429 is rated as a critical vulnerability as it allows attackers to bypass application sandbox protections.

How do I fix CVE-2015-2429?

To fix CVE-2015-2429, you should apply the relevant security updates provided by Microsoft for your affected Windows version.

Which versions of Windows are affected by CVE-2015-2429?

CVE-2015-2429 affects Windows Vista SP2, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2008 SP2, and Windows Server 2012 R2 among others.

What are the potential consequences of CVE-2015-2429 exploitation?

If exploited, CVE-2015-2429 can allow unauthorized registry modifications which may compromise system integrity and security.

Is it necessary to immediately address CVE-2015-2429?

Yes, it is crucial to address CVE-2015-2429 promptly to prevent potential exploitation of the vulnerability.