ZeroDay Findings
Sign inSign up

Findings

CVE-2015-1769

Microsoft Windows Mount Manager Privilege Escalation Vulnerability

Published Aug 14, 2015 · updated Jun 16, 2026 · microsoft windows 10

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. Aug 14, 2015 · Catalog

    Detected

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

  2. May 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

Required action

Apply updates per vendor instructions.

CISA due date Jun 15, 2022

Affected

  • cpe microsoft/windows 10version unspecified
  • cpe microsoft/windows 7version unspecified
  • cpe microsoft/windows 8version unspecified
  • cpe microsoft/windows 8.1version unspecified
  • cpe microsoft/windows rtversion unspecified
  • cpe microsoft/windows rt 8.1version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • cpe microsoft/windows server 2008r2
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2015-1769

    A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.

    cisa.gov
  • CVE.orgCVE-2015-1769

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-1769

    30-day exploitation probability 4.1%

    first.org
  • NIST NVDCVE-2015-1769

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary

    nvd.nist.gov

References