Use-After-Free Vulnerability in Microsoft Windows Products
CVE-2015-1724

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Server 2008
Windows Server 2012
Windows Rt
Windows Server 2003
Vendor
CVE Published:
10 June 2015

Summary

The use-after-free vulnerability in Microsoft Windows allows local users to exploit kernel-mode drivers to gain elevated privileges through specially crafted applications. This flaw affects a wide range of Windows operating systems, from Windows Vista to Windows Server 2012, enabling unauthorized processes to execute with higher access rights than intended. The vulnerability can be exploited by attackers to take control of affected systems, making it imperative for users to apply the necessary security updates promptly.

References

http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACK
https://www.exploit-db.com/exploits/38272/
exploitx_refsource_EXPLOIT-DB
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.