CVE-2015-1701
Microsoft Win32k Privilege Escalation Vulnerability
CVSS
7.8
High
EPSS
56.2%
p99
KEV
YES
Mar 3, 2022
Exploit Today
80
0-100
Published: Apr 21, 2015 · Last modified: Aug 14, 2026
Product
Microsoft / Win32k
Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Added to KEV
Mar 3, 2022
Remediate by
Mar 24, 2022
Known ransomware use
Yes
Summary description
An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2015-1701
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
- seclists.orghttp://seclists.org/fulldisclosure/2020/May/34
- twitter.comhttp://twitter.com/symantec/statuses/590208710527549440
- www.securityfocus.comhttp://www.securityfocus.com/bid/74245
- www.securitytracker.comhttp://www.securitytracker.com/id/1032155
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37049/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37367/
- www.fireeye.comhttps://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
- seclists.orghttp://seclists.org/fulldisclosure/2020/May/34
- twitter.comhttp://twitter.com/symantec/statuses/590208710527549440
- www.securityfocus.comhttp://www.securityfocus.com/bid/74245
- www.securitytracker.comhttp://www.securitytracker.com/id/1032155
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37049/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37367/
- www.fireeye.comhttps://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1701