EXPOSURES › CVE-2015-2387
CVE-2015-2387
HIGH ⌖ ON CISA KEV · EXPLOITEDLocal users can escalate privileges via a crafted application exploiting the ATM Font Driver in Microsoft Windows Server.
This vulnerability allows local attackers to gain elevated privileges, which can lead to full system compromise and data exfiltration. DIB organizations must ensure all Windows Server systems are patched against CVE-2015-2387 to prevent privilege escalation attacks that could bypass access controls and violate CMMC/NIST 800-171 requirements for system integrity and access control.
Shame score — A known privilege escalation vulnerability in a core Windows component that was actively exploited in the wild, indicating a failure to patch a critical system component.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |