Use-After-Free Vulnerability in Microsoft Windows Products
CVE-2015-1723

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows Server 2003
Vendor
CVE Published:
10 June 2015

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%

What is CVE-2015-1723?

A use-after-free vulnerability exists in the kernel-mode drivers of various Microsoft Windows operating systems. This flaw allows local users to exploit a crafted application to gain elevated privileges. Affected systems range from older versions, such as Windows Server 2003 and Vista, to more recent editions like Windows 7 and 8.1. Users and administrators are advised to apply the necessary updates to mitigate potential risks associated with this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2015-1723 - Proof of Concept

References

https://www.exploit-db.com/exploits/38273/
exploitx_refsource_EXPLOIT-DB
http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.