Use-After-Free Vulnerability in Microsoft Windows Products
CVE-2015-1724

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows Server 2003
Vendor
CVE Published:
10 June 2015

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 13%

What is CVE-2015-1724?

The use-after-free vulnerability in Microsoft Windows allows local users to exploit kernel-mode drivers to gain elevated privileges through specially crafted applications. This flaw affects a wide range of Windows operating systems, from Windows Vista to Windows Server 2012, enabling unauthorized processes to execute with higher access rights than intended. The vulnerability can be exploited by attackers to take control of affected systems, making it imperative for users to apply the necessary security updates promptly.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2015-1724 - Proof of Concept

References

http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACK
https://www.exploit-db.com/exploits/38272/
exploitx_refsource_EXPLOIT-DB
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

13% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.