QwikSec

Security Database

CVE

CWE

Training

CVE-2015-1701

Published: Apr 21, 2015

Modified: Oct 21, 2025

PUBLISHED

Description

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://twitter.com/symantec/statuses/590208710527549440

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_MS

exploit

x_refsource_EXPLOIT-DB

https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

20200514 KL-001-2020-002 : Cellebrite Restricted Desktop Escape and Escalation of User Privilege

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.