Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0901 94.8 YES
AFFECTED Product Versions Fixed n/a n/a – —
TIMELINE Mar 13 Reserved by mitre Feb 10 Added to CISA KEV, remediation due 2023-03-03 Feb 10 Published (CNA: mitre) Aug 3 EXPLOIT PUBLISHED — CVE-2015-2291. Public exploit reference added.
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
| Date | Event | Detail |
|---|---|---|
| March 13, 2015 | Reserved | Reserved by mitre |
| February 10, 2023 | KEV ADDED | Added to CISA KEV, remediation due 2023-03-03 |
| February 10, 2023 | Published | Published (CNA: mitre) |
| August 3, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2015-2291. Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| n/a | n/a | — | n/a | — |
Authoritative record: CVE-2015-2291 at cve.org
Weaknesses: CWE-20
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2015-2291 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.