CVE-2015-6128

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Windows Library Loading Remote Code Execution Vulnerability."

Published: Dec 9, 2015
Updated: Apr 13, 2023
CVE: CVE-2015-6128
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
microsoft / windows_7	-	-
microsoft / windows_server_2008	r2-sp1	r2-sp1.x
microsoft / windows_vista	-	-
microsoft / windows_server_2008	-	-

http://www.securityfocus.com/bid/78612
http://www.securitytracker.com/id/1034338
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-132
https://www.exploit-db.com/exploits/38918/

Vulnerability Database

290,020

CVE-2015-6128