CVE-2015-6109

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."

Score

CVSS 2.0 2.1 Low

Status

Modified - secure@microsoft.com

Published

2015-11-11

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Windows 10 (Microsoft)
• Windows 8.1 (Microsoft)
• Windows Rt 8.1 (Microsoft)
• Windows Server 2012 (Microsoft)

References

• http://www.securitytracker.com/id/1034114
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-115