CVE-2015-0012: Microsoft Virtual Machine Manager

Medium severity, CVSS 6.9. EPSS: 1.6% chance of exploitation in the next 30 days.

Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials, aka "Virtual Machine Manager Elevation of Privilege Vulnerability."

Affected products

• Microsoft Virtual Machine Manager: version 2012 only

Published 2015-02-11. Last modified 2026-06-17.