Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L R C H H H 8.2 .1093 95.5 YES
AFFECTED Product Versions Fixed n/a n/a – —
TIMELINE Mar 19 Reserved by microsoft Mar 15 Added to CISA KEV, remediation due 2022-04-05 Mar 15 Published (CNA: microsoft)
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.
| Date | Event | Detail |
|---|---|---|
| March 19, 2015 | Reserved | Reserved by microsoft |
| March 15, 2022 | KEV ADDED | Added to CISA KEV, remediation due 2022-04-05 |
| March 15, 2022 | Published | Published (CNA: microsoft) |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| n/a | n/a | — | n/a | — |
Authoritative record: CVE-2015-2546 at cve.org
Weaknesses: CWE-119
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2015-2546 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.