CVE-2015-1769
KEVMicrosoft Windows Mount Manager Privilege Escalation Vulnerability
Description
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."
CVSS 3.1 vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedAug 15, 2015
Last modifiedJun 17, 2026
Added to KEVMay 25, 2022
Remediation dueJun 15, 2022
References
- blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspxVendor Advisory
- securitytracker.com/id/1033244Third Party AdvisoryVDB Entry
- docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-085PatchVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1769US Government Resource
0 recent articles mention this CVE
63
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1595 days
- CVSS
- 6.6 MEDIUM
- EPSS (30-day exploit probability)
- 4.1% · top 9% of all CVEs
- Weakness
- CWE-264
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.