Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2015-04-21

Status

Published

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Weaknesses

CWE-noinfo Not enough information

Coverage 0

No articles match these filters.

Reset filters

All articles mentioning it

Advisories and references

• twitter.com/symantec/statuses/590208710527549440
• exploit-db.com/exploits/37049/
• securityfocus.com/bid/74245
• docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms1...
• exploit-db.com/exploits/37367/
• fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html
• securitytracker.com/id/1032155
• seclists.org/fulldisclosure/2020/May/34
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-...