NVD disclosure day

Published threat advisories for September 9, 2015

CVE advisoryKnown Exploit

CVE-2015-2546

Windows Local Privilege Escalation Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A local user can gain elevated privileges on affected Windows systems by running a crafted application. This can lead to unauthorized access and control of systems, potentially impacting data and business operations. Organizations should identify affected systems and apply vendor updates.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2015-2545

Microsoft Office Malformed EPS File Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

Microsoft Office applications have a vulnerability in how they handle specially crafted EPS image files, potentially allowing attackers to execute arbitrary code on affected systems. This poses a business risk of unauthorized system control and data compromise. Organizations should address this vulnerability by applyin

NVD published: • CISA KEV