VULNERABILITY INTELLIGENCE

CVE-2015-6109

CVSS score2.1 LOW

EPSS probability3.38%

CISA KEVNot currently listed

Published2015-11-11

Last modified2026-06-17

CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a driver base address, via a crafted application, aka "Windows Kernel Memory Information Disclosure Vulnerability."

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory