CVE-2015-1701
| CVE Published | 2015-04-21 |
|---|---|
| Related Vendor(s) | microsoft |
| Related Product(s) | windows_2003_server, windows_server_2008, windows_vista, windows_7 |
| Exploitation Reported (CISA KEV) | 2022-03-03 |
| CVSS 3 Base Score | 7.8 (HIGH) |
| CVSS 3 Attack Complexity | LOW |
| CVSS 3 Attack Vector | LOCAL |
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
Cyber Threat Graph Context
Explore how this CVE relates to the wider threat graph