VULNERABILITY INTELLIGENCE

CVE-2015-2534

CVSS score1.9 LOW

EPSS probability1.79%

CISA KEVNot currently listed

Published2015-09-09

Last modified2026-06-17

CVSS vectorAV:L/AC:M/Au:N/C:N/I:P/A:N

Description

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 improperly processes ACL settings, which allows local users to bypass intended network-traffic restrictions via a crafted application, aka "Hyper-V Security Feature Bypass Vulnerability."

Weakness classification

CWE-284: Improper Access Control

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory