CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.7
CWE Name:  Information Exposure
Summary: the client/server run-time subsystem (csrss) in microsoft windows vista sp2, windows server 2008 sp2 and r2 sp1, windows 7 sp1, windows 8, windows 8.1, windows server 2012 gold and r2, and windows rt gold and 8.1 allows local users to obtain sensitive information via a crafted application that continues to execute during a subsequent user's login session, aka "windows csrss elevation of privilege vulnerability."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/NONE/NONE
Published Date: 2015-08-15
Last Modified Date: 2019-05-15