EXPOSURES › CVE-2015-1769
CVE-2015-1769
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Windows Mount Manager improperly processes symbolic links, allowing privilege escalation.
An improperly handled symbolic link in the Windows Mount Manager allows attackers to escalate privileges, potentially compromising the entire system. DIB organizations must ensure all Windows systems are patched against this known vulnerability, as it is listed in CISA's KEV catalog indicating active exploitation. Failure to patch exposes systems to unauthorized access and violates CMMC/NIST 800-171 requirements for timely patch management.
Shame score — A known privilege escalation vulnerability in a core Windows component that was actively exploited and listed in CISA's KEV catalog, indicating negligent patching and avoidable compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |