CVE-2015-0002 2

Vulnerability (CVE)

Microsoft Update Tuesday January 2015: Another Light Month, No IE Bulletins, More Changes to Reporting

Microsoft's first Update Tuesday of 2015 carried eight bulletins, each covering a single vulnerability, with seven rated important and one critical, and no Internet Explorer bulletin. One vulnerability was being actively exploited: CVE-2015-0016, a...

Vulnerabilities & Patching

A Token’s Tale

Cyber Risks Google Project Zero

Project Zero's James Forshaw documented CVE-2015-0002, a flaw in the Windows 8.1 ahcache.sys driver where the AhcVerifyAdminContext function fails to verify that an impersonation token is at the privileged SecurityImpersonation level rather than the...

Vulnerabilities & Patching