CVE-2015-0058

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."

Affected products

Windows, Windows 8.1, Windows Rt 8.1, Windows Server 2012 R2

Microsoft Windows 8.1

All versions

Microsoft Windows Rt 8.1

All versions

Microsoft Windows Server 2012

= R2

Fix

Available

CVSS 2.0

7.2 HIGH

EPSS

2.7% (85th percentile)

Weakness

CWE-415

NVD status

Modified

Published

2015-02-11