CVE-2015-1701

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Published: Apr 21, 2015
Updated: Jul 17, 2024
CVE: CVE-2015-1701
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2008	--sp2	--sp2.x
microsoft / windows_2003_server	r2-sp2	r2-sp2.x
microsoft / windows_2003_server	--sp2	--sp2.x
microsoft / windows_7	--sp1	--sp1.x
microsoft / windows_vista	--sp2	--sp2.x

http://seclists.org/fulldisclosure/2020/May/34
http://twitter.com/symantec/statuses/590208710527549440
http://www.securityfocus.com/bid/74245
http://www.securitytracker.com/id/1032155
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
https://www.exploit-db.com/exploits/37049/
https://www.exploit-db.com/exploits/37367/
https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html

Vulnerability Database

289,598

CVE-2015-1701