CVE-2015-1701 Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in....
HighCVSS 7.8
EPSS 56.2%
CISA KEV
added 2022-03-03 · due 2022-03-24
Ransomware
Exploited in the wild
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | All versions | No fix listed |
| Microsoft windows 2003 server | = r2-sp2 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
References
- twitter.com press-media-coverage
- 37049 exploit third-party-advisory vdb-entry
- 74245 broken-link third-party-advisory vdb-entry
- MS15-051 patch vendor-advisory
- 37367 exploit third-party-advisory vdb-entry
- www.fireeye.com third-party-advisory
- 1032155 broken-link third-party-advisory vdb-entry
- 20200514 KL-001-2020-002 : Cellebrite Restricted Desktop Escape and Escalation of User Privilege broken-link mailing-list third-party-advisory
- www.cisa.gov government-resource us-government-resource