CVE-2015-6175VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2015-6175: Microsoft Windows Kernel Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/25/2022
KEV deadline: 06/15/2022
EPSS: 5.3% chance of exploitation in 30 days – higher than 92% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2015-6175 (opens in a new tab)

Description

CVE-2015-6175 is a privilege escalation vulnerability in the Microsoft Windows kernel that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.

Summary

The Microsoft Windows kernel contains a vulnerability identified as CVE-2015-6175 that enables local attackers to escalate privileges by executing a crafted application. This flaw relates to improper privilege management within the kernel, classified under CWE-264 (Permissions, Privileges, and Access Controls). The vulnerability has been observed in active exploitation scenarios, indicating real-world risk. However, no explicit details about affected Windows versions or remediation status are included in the provided information.

Impact

Local users can exploit this vulnerability to gain elevated privileges on affected Windows systems, potentially allowing unauthorized access to sensitive system functions or data. The vulnerability has been exploited in the wild, confirming its practical impact. The absence of detailed affected version or patch information limits precise impact scope assessment.

Mitigation

Patch status is not yet confirmed — check the Microsoft vendor advisory for current remediation guidance. Until official fixes are confirmed, restrict local user access and monitor for suspicious activity related to privilege escalation attempts.

Weaknesses

CWE-264Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:49:52 UTC

Weaknesses

References

Related threats