CVE-2015-1768 — win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."

Back Back to CVE browser

HIGH

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."

Published Jun 10, 2015

7.2

HIGH

CVSS 2.0

EPSS 2.03%

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Metrics

2.03% 0.02028

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02028

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.03% (0.02028)	80.31th	v5 (v2026.06.15)
Jun 15, 2026	2.03% (0.02028)	78.43th	v5 (v2026.06.15)
May 21, 2025	2.21% (0.02214)	83.63th	v4 (v2025.03.14)
Mar 17, 2025	0.53% (0.00529)	65.23th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	11.28th	v3 (v2023.03.01)
Jun 12, 2024	0.04% (0.00043)	9.42th	v3 (v2023.03.01)
Mar 7, 2023	0.04% (0.00043)	7.39th	v3 (v2023.03.01)
Mar 6, 2023	1.27% (0.01268)	67.53th	v2 (v2022.01.01)
Jan 8, 2023	1.27% (0.01268)	66.76th	v2 (v2022.01.01)
Apr 1, 2022	1.49% (0.01492)	71.53th	v2 (v2022.01.01)
Feb 4, 2022	1.49% (0.01492)	50.61th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://www.securityfocus.com/bid/75024
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061
vendor-advisoryx_refsource_MS

Link	Providers	Tags
http://www.securityfocus.com/bid/75024		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032525		vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061		vendor-advisoryx_refsource_MS

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jun 10, 2015

Updated Aug 6, 2024

Reserved Feb 17, 2015

Link CVE-2015-1768

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-1768

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-1768