High severity7.8CISA KEVNVD Advisory· Published Apr 21, 2015· Updated Aug 14, 2026
CVE-2015-1701
CVE-2015-1701
Description
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8SP2+ 2 more
- (no CPE)range: SP2
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:r2:sp2:*:*:*:*:*:*
- Range: SP2
SP2+ 1 more
- (no CPE)range: SP2
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-051nvdPatchVendor Advisory
- www.exploit-db.com/exploits/37049/nvdExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/37367/nvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/May/34nvdBroken LinkMailing ListThird Party Advisory
- www.securityfocus.com/bid/74245nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1032155nvdBroken LinkThird Party AdvisoryVDB Entry
- www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.htmlnvdThird Party Advisory
- twitter.com/symantec/statuses/590208710527549440nvdPress/Media Coverage
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.