CVE-2015-2363 — Microsoft Windows 2003 Server vulnerability

CWE-2643 documents3 sources

Severity

7.2HIGHNVD

EPSS

1.0%

top 23.13%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Windows 2003 Server Microsoft Windows Server 2008

Timeline

PublishedJul 14

Latest updateMay 14

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/windows_2003_serverr2

▶NVDmicrosoft/windowsr2

🔴Vulnerability Details

GHSA

GHSA-2w52-h5q8-4cwq: win32k↗2022-05-14

▶

CVEList

CVE-2015-2363: win32k↗2015-07-14

▶