peter bassill · operator
$ cve CVE-2015-1769 JSON

CVE-2015-1769 KEV

6.6
MEDIUM · CVSS 3.1 · EPSS 4.1% (pctl 90)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-15.

Description

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

Scoring

CVSS6.6 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS4.08% — more likely to be exploited than 90% of all CVEs
WeaknessCWE-264
On CISA KEVyes — remediate by 2022-06-15
Public exploitnone known
Published2015-08-15
Last modified2026-06-17

CISA KEV

NameMicrosoft Windows Mount Manager Privilege Escalation Vulnerability
Added2022-05-25
Due2022-06-15
Vendor / productMicrosoft / Windows
Ransomware usenone reported

Affected (9)

VendorProduct
microsoftwindows 10
microsoftwindows 7
microsoftwindows 8
microsoftwindows 8.1
microsoftwindows rt
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows vista

References

→ the Explorer  ·  watch your stack  ·  NVD