CVE-2015-1701

High · 7.8 CISA KEV · ransomware

CVSS

7.8

EPSS

55.9%

Published

Apr 21, 2015

CISA due date

Mar 24, 2022

The record

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Affected packages

Ecosystem	Package	Introduced	Fixed