peter bassill · operator
$ cve CVE-2015-6175 JSON

CVE-2015-6175 KEV

7.8
HIGH · CVSS 3.1 · EPSS 5.1% (pctl 92)

Patch first

On CISA KEV — known exploited in the wild, due 2022-06-15.

Description

The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS5.13% — more likely to be exploited than 92% of all CVEs
On CISA KEVyes — remediate by 2022-06-15
Public exploitnone known
Published2015-12-09
Last modified2026-06-17

CISA KEV

NameMicrosoft Windows Kernel Privilege Escalation Vulnerability
Added2022-05-25
Due2022-06-15
Vendor / productMicrosoft / Windows
Ransomware usenone reported

Affected (1)

VendorProduct
microsoftwindows 10 1507

References

→ the Explorer  ·  watch your stack  ·  NVD