CVE-2015-2291High· 7.8▾ Abyssal⚠ Exploited in the wildPoC available

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted …

▾ Abyssal zone — Critical with a public exploit or in-the-wild use

Depth score76/ 100 · Elevated

impact 42.9 · likelihood 3.1 · exploitation 25 · ransomware 5

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Aug 9, 2017

Updated

Oct 1, 2026

CVSS

7.8

Vendor

intel

Product

ethernet_diagnostics_driver_iqvw32.sys

CWE

CWE-20

Depth score

76 · Elevated

EPSS

16% · p97

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit availability

Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.

checked 2026-10-27

Exploit-DB

Search Exploit-DB for CVE-2015-2291 ↗

GitHub PoCs

4 public repositories

CISA SSVC

decided 2026-08-04

Exploitation: active
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Aug 4.

9.0% → 16%▲ 6.7%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

6 events · 3367 days

Aug 9, 2017Published
Disclosed via NVD
Feb 10, 2023Added to CISA KEV
Federal remediation due Mar 3, 2023
Aug 4, 2026EPSS first tracked
9.0%
Oct 1, 2026Record revised
Last analysed / modified upstream
Oct 26, 2026EPSS peak
9.0% → 16%
Oct 27, 2026Public exploit observed
Exploit-DB · 4 GitHub repos (last check)

intel CWE-20 #nvd #cve.org #in-the-wild #exploit-available #kev

CISA KEVKnown Exploited VulnerabilityRansomware campaign use

Added to the CISA catalog on Feb 10, 2023. Federal remediation due Mar 3, 2023. View catalog ↗

Affected

ethernet_diagnostics_driver_iqvw32.sys = 1.03.0.7
ethernet_diagnostics_driver_iqvw64.sys = 1.03.0.7

Full technical detail▾

Overview

Affected

ethernet_diagnostics_driver_iqvw32.sys = 1.03.0.7
ethernet_diagnostics_driver_iqvw64.sys = 1.03.0.7

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 26, 2026EPSS 9% → 16%

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#in-the-wild#exploit-available#kev

← Back to feed

CVE-2015-2291High· 7.8▾ Abyssal⚠ Exploited in the wildPoC available

(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted …

▾ Abyssal zone — Critical with a public exploit or in-the-wild use

Depth score76/ 100 · Elevated

impact 42.9 · likelihood 3.1 · exploitation 25 · ransomware 5

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Aug 9, 2017

Updated

Oct 1, 2026

CVSS

7.8

Vendor

intel

Product

ethernet_diagnostics_driver_iqvw32.sys

CWE

CWE-20

Depth score

76 · Elevated

EPSS

16% · p97

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit availability

Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.

checked 2026-10-27

Exploit-DB

Search Exploit-DB for CVE-2015-2291 ↗

GitHub PoCs

4 public repositories

CISA SSVC

decided 2026-08-04

Exploitation: active
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Aug 4.

9.0% → 16%▲ 6.7%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

6 events · 3367 days

Aug 9, 2017Published
Disclosed via NVD
Feb 10, 2023Added to CISA KEV
Federal remediation due Mar 3, 2023
Aug 4, 2026EPSS first tracked
9.0%
Oct 1, 2026Record revised
Last analysed / modified upstream
Oct 26, 2026EPSS peak
9.0% → 16%
Oct 27, 2026Public exploit observed
Exploit-DB · 4 GitHub repos (last check)

intel CWE-20 #nvd #cve.org #in-the-wild #exploit-available #kev

CISA KEVKnown Exploited VulnerabilityRansomware campaign use

Added to the CISA catalog on Feb 10, 2023. Federal remediation due Mar 3, 2023. View catalog ↗

Affected

ethernet_diagnostics_driver_iqvw32.sys = 1.03.0.7
ethernet_diagnostics_driver_iqvw64.sys = 1.03.0.7

Full technical detail▾

Overview

Affected

ethernet_diagnostics_driver_iqvw32.sys = 1.03.0.7
ethernet_diagnostics_driver_iqvw64.sys = 1.03.0.7

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 26, 2026EPSS 9% → 16%

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#in-the-wild#exploit-available#kev