CVE-2015-1769

medium · 6.6Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-05-25Remediation due 2022-06-15

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

6.6

CVSS

4.1%

EPSS (exploit prob.)

90th

EPSS percentile

2015-08-15

Published

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
microsoft	windows_10	all versions
microsoft	windows_7	all versions
microsoft	windows_8	all versions
microsoft	windows_8.1	all versions
microsoft	windows_rt	all versions
microsoft	windows_rt_8.1	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	all versions
microsoft	windows_server_2012	r2
microsoft	windows_vista	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-1769