CVE-2015-1678 is a memory disclosure vulnerability affecting kernel-mode drivers in various Microsoft Windows operating systems, including Windows 7, 8, 8.1, Server 2003, 2008, and 2012. A local attacker can exploit this flaw by crafting a specific function call to bypass Address Space Layout Randomization (ASLR). The vulnerability has a low severity CVSS score of 2.1, indicating a low attack complexity and requiring local access, with the primary impact being information disclosure (bypassing ASLR). While not actively exploited in the wild and lacking significant community discussion or media coverage, an ExploitDB entry (EDB-37049) exists, demonstrating its potential for local privilege escalation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.