Live › vulnerability › CVE-2015-0016
Go to dashboardA directory traversal flaw in the TS WebProxy (TSWbPrxy) component of Microsoft Windows lets a remote attacker escalate privileges. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
| microsoft windows 7 | vendor | – | – |
| microsoft windows 8 | vendor | – | – |
| microsoft windows 8.1 | vendor | – | – |
| microsoft windows rt | vendor | – | – |
| microsoft windows rt 8.1 | vendor | – | – |
| microsoft windows server 2008 | vendor | = r2 | – |
| microsoft windows server 2012 | vendor | – | – |
| microsoft windows server 2012 | vendor | = r2 | – |
| microsoft windows vista | vendor | – | – |
Unknown from the sources.
Apply the Microsoft Windows updates per the vendor instructions referenced by CISA; the specific patch KB is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Directory Traversal Elevation of Privilege Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2015-0016")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.