CVE-2015-1701

Description

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

References

https://www.bleepingcomputer.com/news/security/privilege-elevation-exploits-used-in-over-50-percent-of-insider-attacks/

https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051

http://seclists.org/fulldisclosure/2020/May/34

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3