GCVE - cpe:2.3:o:microsoft:windows_rt:-:gold:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_rt:-:gold:*:*:*:*:*:*

part: o version: - update: gold

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Rt (`8bfa0174-8ed7-57c9-a727-f8905c9114b8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0016`	vulnerable	2026-06-08 05:06:13.358121	Details available Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Directory Traversal Elevation of Privilege Vulnerability." Published: 2015-01-13T22:00:00.000Z Updated: 2025-10-22T00:05:33.942Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/71965 http://www.securitytracker.com/id/1031524 https://exchange.xforce.ibmcloud.com/vulnerabilities/99515 http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2015-0016-escaping-the-internet-explorer-sandbox/ https://exchange.xforce.ibmcloud.com/vulnerabilities/99516	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0011`	vulnerable	2026-06-08 05:06:13.349094	Details available mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass an impersonation protection mechanism, and obtain privileges for redirection of WebDAV requests, via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability." Published: 2015-01-13T22:00:00.000Z Updated: 2024-08-06T03:55:27.627Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/99527 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-008 http://www.securitytracker.com/id/1031531 http://www.securityfocus.com/bid/71960 http://secunia.com/advisories/62154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0004`	vulnerable	2026-06-08 05:06:13.339328	Details available The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction attack to load another user's UsrClass.dat registry hive, aka MSRC ID 20674 or "Microsoft User Profile Service Elevation of Privilege Vulnerability." Published: 2015-01-13T22:00:00.000Z Updated: 2024-08-06T03:55:27.483Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/71967 http://secunia.com/advisories/61927 https://exchange.xforce.ibmcloud.com/vulnerabilities/99519 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-003 https://code.google.com/p/google-security-research/issues/detail?id=123	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0002`	vulnerable	2026-06-08 05:06:13.331309	Details available The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with an administrative account, which allows local users to gain privileges by running AppCompatCache.exe with a crafted DLL file, aka MSRC ID 20544 or "Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability." Published: 2015-01-13T22:00:00.000Z Updated: 2024-08-06T03:55:27.520Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/99523 https://code.google.com/p/google-security-research/issues/detail?id=118 http://www.securityfocus.com/bid/71972 https://exchange.xforce.ibmcloud.com/vulnerabilities/99524 http://www.zdnet.com/article/google-discloses-unpatched-windows-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0001`	vulnerable	2026-06-08 05:06:13.328124	Details available The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging administrative privileges, aka "Windows Error Reporting Security Feature Bypass Vulnerability." Published: 2015-01-13T22:00:00.000Z Updated: 2024-08-06T03:55:27.531Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-006 https://exchange.xforce.ibmcloud.com/vulnerabilities/99514 https://exchange.xforce.ibmcloud.com/vulnerabilities/99513 http://secunia.com/advisories/62134 http://www.securityfocus.com/bid/71927	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6355`	vulnerable	2026-06-08 05:05:57.473470	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.