CVE-2015-1701
Microsoft Windows 2003 Server r2
Raw vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2015-1701 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 2003 Server. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 1% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
The vulnerability CVE-2015-1701 resides in the Win32k.sys kernel-mode driver on Microsoft Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2. It is an elevation-of-privilege flaw that can be triggered by a crafted application, as indicated by its CVSS 3.1 base score of 7.8 under an AV:L/AC:L/PR:L vector.
Local users on affected systems can exploit the issue by executing a malicious application, resulting in the ability to gain higher privileges. The vulnerability was observed being exploited in the wild during April 2015.
Microsoft security bulletin MS15-051 supplies patches that address the flaw on the listed platforms, along with associated mitigation steps referenced in the advisory.
The issue is tracked under the common name Win32k Elevation of Privilege Vulnerability and has been discussed in multiple public security trackers and mailing-list disclosures.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2015-1831
Vulnerability Data
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege…
more
Vulnerability."
- CWE(s)
- KEV Date Added
- 03 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.