CVE-2015-1701

CVE Published 2015-04-21
Related Vendor(s) microsoft
Related Product(s) windows_7, windows_server_2008, windows_vista, windows_2003_server
Exploitation Reported (CISA KEV) 2022-03-03
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References