CVE-2015-6175: Microsoft Windows Kernel Privilege Escalation Vulnerability
What It Is – A local privilege‑escalation flaw in the Windows kernel that allows a low‑privileged user to obtain SYSTEM rights by running a crafted application.
Exploitability – Publicly disclosed; proof‑of‑concept code exists. CVSS v3.1 base score 7.8 (High).
Affected Products – Microsoft Windows operating systems (all supported versions at the time of disclosure).
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous patch‑management monitoring to prove that critical OS updates are applied across the enterprise.
- Provides evidence of due‑diligence when auditors request proof that known kernel flaws have been remediated.
- Highlights the importance of defensible audit trails for privileged‑access changes, a core requirement for many control frameworks.
Recommended Actions
- Verify that the Microsoft security update addressing CVE‑2015‑6175 is deployed on all Windows endpoints.
- Use an automated configuration‑assessment tool to scan for missing patches and generate compliance evidence.
- Update your privileged‑access policy to require multi‑factor authentication for any elevation to SYSTEM rights.
- Log and retain all privilege‑escalation events for at least 90 days to support audit inquiries.
Source: CISA KEV – CVE‑2015‑6175