CVE-2015-1769: Microsoft Windows Mount Manager Privilege Escalation Vulnerability
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."
Other sources
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1769?
CVE-2015-1769 has a critical severity rating due to its potential to allow unauthorized remote code execution.
How do I fix CVE-2015-1769?
To fix CVE-2015-1769, ensure that your Windows system is updated with the latest security patches provided by Microsoft.
Who is affected by CVE-2015-1769?
CVE-2015-1769 affects users of Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012, and Windows 10.
What type of attack does CVE-2015-1769 enable?
CVE-2015-1769 enables physically proximate attackers to execute arbitrary code via malicious USB devices.
What is the main vulnerability of CVE-2015-1769?
The main vulnerability of CVE-2015-1769 involves the mishandling of symlinks in the Windows Mount Manager.