Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-2511: Windows kernel driver may let local user gain admin rights

CVE-2015-2511 · published 11 years ago

Summary

The kernel-mode driver in several Windows versions—including Windows 7, 8, 8.1, 10, and related server and RT editions—can be tricked by a specially crafted program to give a regular user administrative privileges. This could allow the user to change system settings, install software, or access sensitive data. Apply the latest Microsoft security updates for your Windows version to protect against this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	windows_10	All versions `cpe:2.3:o:microsoft:windows_10:-:::::::*`
microsoft	windows_7	All versions `cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
microsoft	windows_8	All versions `cpe:2.3:o:microsoft:windows_8:-:::::::*`
microsoft	windows_8.1	All versions `cpe:2.3:o:microsoft:windows_8.1:-:::::::*`
microsoft	windows_rt	All versions `cpe:2.3:o:microsoft:windows_rt:-:::::::*`
microsoft	windows_rt_8.1	All versions `cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server_2008	r2 `cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::`
microsoft	windows_server_2012	r2 `cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_vista	All versions `cpe:2.3:o:microsoft:windows_vista:-:sp2::::::`

Original advisory text

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2517, CVE-2015-2518, and CVE-2015-2546.

References

http://www.securityfocus.com/bid/76597 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1033485 Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-09... Patch Vendor Advisory
https://www.exploit-db.com/exploits/38276/ Third Party Advisory VDB Entry

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

6.9 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published9 Sep 2015

Updated23 Oct 2026

First seen29 Sep 2026

Sources

CVE-2015-2511 · NVD

Track software like this

Free during beta