CVE-2015-6104

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1...

9.3 HighPublic exploit

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Memory Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-6103.

Exploit likelihood

35.3%Down 32.2 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2015-6104
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-6104
Updated: 2026-11-02

EUVDEUVD-2015-6047 No score

Record: EUVD-2015-6047
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8vvh-pvhm-qrm3 No score

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1...

Record: GHSA-8vvh-pvhm-qrm3
Weakness: CWE-20
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft Windows Kernel - 'win32k.sys' Malformed TrueType Program TTF Font Processing Pool-Based Buffer Overflow (MS15-115)	2015-11-16

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-6104 is a high vulnerability (CVSS 9.3) in Microsoft Windows 10, published November 11, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 35.3%, the 98th percentile. No source names a fixed version.