CVE-2015-1701
KEV RANSOMWAREHIGH 7.8EPSS 56.2%
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 56.20% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2022-03-03, used in ransomware campaigns
- Published
- 2015-04-21
- Updated
- 2026-08-14
Proof-of-concept exploits (3)
- Anonymous-Family/CVE-2015-17010★ · 2022-03-21
- Anonymous-Family/CVE-2015-1701-download0★ · 2022-03-21
- hfiref0x/CVE-2015-1701293★ · 2017-12-18