Is CVE-2007-4315 being actively exploited?

CVE-2007-4315 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-4315?

CVE-2007-4315 has a CVSS 2.0 base score of 6.9 (MEDIUM).

CVE-2007-4315

MEDIUM · CVSS 6.9EPSS 0.3%EU EUVD

The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel memory locations, and thereby gain privileges via unspecified vectors, as demonstrated by "Purple Pill".

Key facts

CVSS score: 6.9 (v2.0)
Severity: MEDIUM
CVSS vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE): CWE-264
EPSS score: 0.3% (22th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-4298)
Published: August 13, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-4298 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

amd / catalyst driver
ati / catalyst driver
microsoft / windows vista

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain