CVE-2015-2360

A local privilege escalation vulnerability in Microsoft Win32k.sys allowed attackers to gain elevated access or cause denial-of-service.

This CVE-2015-2360 flaw in the Windows kernel-mode driver enabled local users to escalate privileges or trigger DoS, highlighting the risk of unpatched kernel vulnerabilities. DIB organizations must ensure timely patching of Windows systems to prevent attackers from leveraging such flaws for lateral movement or system compromise. The vulnerability was actively exploited in the wild, underscoring the critical need for rigorous patch management and vulnerability monitoring.

Shame score — The vulnerability was actively exploited in the wild and remained unpatched for years, allowing attackers to escalate privileges on widely deployed Windows systems.