According to researchers post , the vulnerability exists in Microsoft Windows Kernel, in the Win32k.sys module , with local access an attacker can exploit this privilege acceleration vulnerability to gain windows administrators privileges , as shown by in PoC video by researcher .
https://technet.microsoft.com/library/security/MS15-010
An elevation of privilege vulnerability exists in the Windows kernel-mode driver (Win32k.sys) that is caused when it improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and read arbitrary amounts of kernel memory. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Download and update your windows desktops to prevent , losing access to your admins privileges , all patches are available through windows update .
Useful Link
- POC Video Link : https://www.youtube.com/watch?v=ukAr6MiA788
- Microsoft KB : https://support.microsoft.com/kb/3023562
- Hacker News : https://news.ycombinator.com/item?id=9031419