Total vulnerabilities in the database
Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege, aka "Windows Create Process Elevation of Privilege Vulnerability."
| Software | From | Fixed in |
|---|---|---|
| microsoft / windows_server_2008 | r2-sp1 | r2-sp1.x |
| microsoft / windows_server_2012 | r2 | r2.x |
| microsoft / windows_7 | --sp1 | --sp1.x |