CVE-2015-0001(microsoft / windows_8)

CVE-2015-0001 | An admin is not meant to open every vault Think of a building manager reaching a vault that should need a separate key. Windows Error Reporting could let a local administrator bypass Protected Process Light and read protected process memory. Administrative privileges were already required. This was not a shortcut from an ordinary user account to administrator, but a failure of an additional protection boundary. The lesson: defense in depth still matters after admin access. A privileged account should not make every safeguard optional.

Administrative privileges were already required. This was not a shortcut from an ordinary user account to administrator. The flaw bypassed a protected-process boundary. Lesson: protection layers matter even after admin access. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2015/0xxx/CVE-2015-0001.json