CVE-2015-2524

Microsoft Windows 8-10, Server 2012-R2 Privilege Escalation via Impersonation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-2524. PoCs published by Google Security Research.

AI-analyzed exploit summary The vulnerability involves the CreateObjectTask scheduled task in Windows 8.1, which allows a user-accessible COM object (SettingsSyncDiagnostics) to copy log files to arbitrary locations with SYSTEM privileges due to lack of impersonation. Exploitation involves symbolic link attacks or ACL manipulation to achieve privilege escalation.

Description

Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Task Management Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2528.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Google Security Research · textlocalwindows

https://www.exploit-db.com/exploits/38202

View Code ZIP pw:eip

The vulnerability involves the CreateObjectTask scheduled task in Windows 8.1, which allows a user-accessible COM object (SettingsSyncDiagnostics) to copy log files to arbitrary locations with SYSTEM privileges due to lack of impersonation. Exploitation involves symbolic link attacks or ACL manipulation to achieve privilege escalation.

Classification

Writeup 95%

Attack Type

Lpe

Complexity

Complex

Reliability

Racy

Target: Windows 8.1 Update

Auth required

Prerequisites: Local user access · Windows 8.1 Update environment

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548.002 - Bypass User Account Control

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/38202/

Patch, Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-102

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033494

Scores

EPSS 0.0347

EPSS Percentile 87.5%

Details

CWE

CWE-264

Status published

Products (7)

microsoft/windows_10

microsoft/windows_8

microsoft/windows_8.1

microsoft/windows_rt

microsoft/windows_rt_8.1

microsoft/windows_server_2012

microsoft/windows_server_2012 r2

Published Sep 09, 2015

Tracked Since Feb 18, 2026