{"schemaVersion":3,"id":"CVE-2015-1769","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","description":"Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka \"Mount Manager Elevation of Privilege Vulnerability.\"","dates":{"published":"2015-08-15T00:00:00.000Z","modified":"2025-10-21T23:55:58.179Z","reserved":null,"kevAdded":["2022-05-25T00:00:00.000Z"],"kevDue":["2022-06-15T00:00:00.000Z"]},"cvss":{"headline":{"score":7.2,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.6,"severity":"medium","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.6,"severity":"medium","vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04078,"percentile":0.90646,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.04078},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04111,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04111,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04111,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04111,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04078,"percentile":0.90646}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.04078,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.04078,"percentile":0.90646}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-25T00:00:00.000Z","dueDate":"2022-06-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","description":"A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-1769","label":"nvd.nist.gov/vuln/detail/CVE-2015-1769"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-05-25T00:00:00.000Z","dueDate":"2022-06-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","description":"A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-1769","label":"nvd.nist.gov/vuln/detail/CVE-2015-1769"}],"vendor":"Microsoft","product":"Windows","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-264","name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/264.html"}],"affected":[{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_7","name":"windows 7","label":"windows_7","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_7"},{"vendor":"microsoft","product":"windows_8","name":"windows 8","label":"windows_8","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_8"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt","name":"windows rt","label":"windows_rt","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows server 2012","name":"Windows Server 2012","label":"windows server 2012","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows_vista","name":"windows vista","label":"windows_vista","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_vista"}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspx","label":"blogs.technet.com/b/…","hostname":"blogs.technet.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085","label":"docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085","hostname":"docs.microsoft.com","tags":["Vendor Advisory","X Refsource MS","Patch"]},{"url":"http://www.securitytracker.com/id/1033244","label":"www.securitytracker.com/id/1033244","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1769","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1769","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-08-15T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-05-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-06-15T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:58.179Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:43:20.751Z","stale":false,"partial":false}}