EXPOSURES › CVE-2015-6175
CVE-2015-6175
HIGH ⌖ ON CISA KEV · EXPLOITEDA local privilege escalation vulnerability in the Windows kernel allowed attackers to gain elevated access via a crafted application.
This kernel vulnerability enabled local users to escalate privileges without remote access, but its inclusion in CISA's KEV catalog confirms it was actively exploited in the wild. DIB organizations must ensure all Windows systems are patched against this known exploit to prevent unauthorized access and maintain compliance with security baselines.
Shame score — The vulnerability was actively exploited in the wild and included in CISA's KEV catalog, indicating negligent patching and avoidable compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |