CVE-2015-2546
Microsoft Win32k Memory Corruption Vulnerability
CVSS
8.2
High
EPSS
10.1%
p96
KEV
YES
Mar 15, 2022
Exploit Today
79
0-100
Published: Sep 9, 2015 · Last modified: Aug 14, 2026 · CWE-119
10.1%EPSS · 30 days10.2%
2026-09-162026-10-14
Product
Microsoft / Win32k
Vulnerability
Microsoft Win32k Memory Corruption Vulnerability
Added to KEV
Mar 15, 2022
Remediate by
Apr 5, 2022
Known ransomware use
Yes
Summary description
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2015-2546
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.
- www.securityfocus.comhttp://www.securityfocus.com/bid/76608
- www.securitytracker.comhttp://www.securitytracker.com/id/1033485
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-097
- www.securityfocus.comhttp://www.securityfocus.com/bid/76608
- www.securitytracker.comhttp://www.securitytracker.com/id/1033485
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-097
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2546
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-454508.3 HIG—
———: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.
This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.5hCVE-2026-11095810.0 CRI—
———A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."4hCVE-2026-1108102.8 LOW—
——0A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.8hCVE-2026-1106986.3 MED—
——0A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a910d21a2705ef4cd16d91f29cdc8da1ab1a7221. To fix this issue, it is recommended to deploy a patch. The project maintainer confirms: "We did a quick fix (suggested fix 1) for Praat version 7.0.03, and scheduled a better fix (suggested fix 2)."9hCVE-2026-1106956.3 MED—
——0A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.8hCVE-2026-1106946.3 MED—
——0A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.9h