CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-01-13
Microsoft Windows TS WebProxy Directory Traversal Privilege Escalation and IE Sandbox Escape (CVE-2015-0016, MS15-004)
[Affected Scope] Windows Vista SP2, 7 SP1, 8, 8.1, Windows Server 2008 R2 SP1, 2012 R2 utilizing the TS WebProxy (TSWbPrxy) component
[Impact] Remote attackers can bypass the Internet Explorer Protected Mode sandbox (Low Integrity) and execute arbitrary code with Medium Integrity privileges via a crafted executable path
[Mitigation] Apply the official Microsoft MS15-004 security update immediately and restrict unauthorized ActiveX control execution