Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV

CVE-2015-1701

  1. First PoC
  2. 3992 days →Metasploit
  3. 178 days →First cited attacker

Signals

Exploited in the wild
Yesadded 2022-03-03 · due 2022-03-24 · known ransomware use. An observation, not a forecast.
EPSS · 30-day forecast
56%Chance of exploitation in the next 30 days, 99th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
not stated by sourcesNo NVD record yet.
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

3 known · links only

Metasploit1

  1. Windows ClientCopyImage Win32k Exploit ↗

    This module exploits improper object handling in the win32k.sys kernel mode driver. This module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64.

    ruby · seen 2026-10-18

Exploit-DB2

  1. Microsoft Windows - Local Privilege Escalation (MS15-051) ↗

    created 2015-05-18

  2. Microsoft Windows - ClientCopyImage Win32k (MS15-051) (Metasploit) ↗

    created 2015-06-24

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.