IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High KEV Used in ransomware

CVE-2015-1701Microsoft Win32k Privilege Escalation Vulnerability

microsoft windows 2003 server; microsoft windows 7; microsoft windows server 2008; microsoft windows vista Published: (11 years ago)

Known exploited — Microsoft Win32k Privilege Escalation Vulnerability

CISA confirmed this vulnerability is used in real attacks on 03.03.2022. Remediation deadline for US federal agencies: 24.03.2022.

Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2015-1701

Description

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
microsoft windows 2003 server r2
microsoft windows 7 —
microsoft windows server 2008 —
microsoft windows vista —

References and patches

CPE matches (NVD) (5)
  • cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_2003_server:r2:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Recent CVEs in the same product — Windows Server

6.5Medium
CVE-2026-108129

Role: DNS Server Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

1.1%EPSS