CVE-2015-1724

HIGH ⚠ Exploit

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1...

Affects 9 products across 1 vendor.

CVSS 2.07.2
EPSS3.3%
Percentile88th
PatchPatched
CVSS Vector — Plain English Requires local access, low complexity.
CWE Weakness Definitions
CWE-416: Use After Free

Software references memory after it has been freed, leading to corruption, crashes, or code execution.

◆ AI Analysis — automated analysis, not human-reviewed

A use-after-free vulnerability in the kernel-mode drivers of several Microsoft Windows versions allows local users to gain elevated privileges through a specially crafted application.

BSID: BS-2015-GLOBAL-170751-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2015-1724?
A use-after-free vulnerability in the kernel-mode drivers of several Microsoft Windows versions allows local users to gain elevated privileges through a specially crafted application.
What is the CVSS score for CVE-2015-1724?
CVE-2015-1724 has CVSS 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. EPSS: 3.3%.
Is CVE-2015-1724 actively exploited?
Public exploit available for CVE-2015-1724. Exploitation risk elevated.
How do I remediate CVE-2015-1724?
Priority: HIGH. Advisory: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061 PSIRT: [email protected]
What systems are affected by CVE-2015-1724?
CVE-2015-1724 affects Microsoft Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows 8, Windows Server 2012, Windows Rt, Windows 8.1, Windows Rt 8.1.
Vulnerability Details
CVE IDCVE-2015-1724
BSIDBS-2015-GLOBAL-170751-H BreachSpider Global ID
CVSS VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Published2015-06-10
Last Modified2026-05-06
ICS Relevance0%
Weakness (CWE)
Use After Free
SourceNVD
Official Description

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Object Use After Free Vulnerability."

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability occurs due to improper handling of memory in kernel-mode drivers, which can lead to a use-after-free condition. An attacker can exploit this by creating a malicious application that triggers the vulnerability, potentially leading to privilege escalation.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Microsoft Windows Server 2003 r2
Microsoft Windows Vista No version listed by source
Microsoft Windows Server 2008 r2
Microsoft Windows 7 No version listed by source
Microsoft Windows 8 No version listed by source
Microsoft Windows Server 2012 r2
Microsoft Windows Rt No version listed by source
Microsoft Windows 8.1 No version listed by source
Microsoft Windows Rt 8.1 No version listed by source
Remediation
View Vendor Advisory →

Remediation Priority: HIGH

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 4146 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Microsoft
CVE-2026-48331 10.0 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SS... CVE-2007-1644 10.0 The dynamic DNS update mechanism in the DNS Server service on Microsoft Windo... CVE-2009-2532 10.0 Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2,... CVE-2012-0772 10.0 An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 1... CVE-2011-1300 10.0 The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in l...
View all Microsoft CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →