Microsoft acknowledged in its September Patch Tuesday release that CVE-2015-2546 is being exploited for local privilege escalation in the wild. The vulnerability is present in all versions of Windows and is addressed in MS15-097.
Our RTI for QID: 91094 is set to: ActivelyAttacked.