CVE-2015-1769: Microsoft Windows Mount Manager Privilege Escalation Vulnerability

Vulnerability summary

CVE-2015-1769 is a high (CVSS 7.2) vulnerability in Microsoft Windows. It is known to be exploited: CISA lists it, first on 25-05-2022. EPSS estimates a 4.08% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities.

Timeline

1. 15-08-2015
   PublishedVulnerability first disclosed.
2. 25-05-2022
   Added to CISA KEVMicrosoft Windows Mount Manager Privilege Escalation Vulnerability
3. 15-06-2022
   CISA remediation dueApply updates per vendor instructions.
4. 21-10-2025
   Last modifiedVulnerability information updated.

Description

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.