VulnSocial

CVE-2015-1635Patch(microsoft / windows_7)

LOWCVSS 9.8 · CRITICALCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_7 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

microsoft CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-08-10. Apply updates per vendor instructions.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_7
  • windows_8
  • windows_8.1
  • windows_server_2008

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
microsoft
Products
windows_7windows_8windows_8.1windows_server_2008windows_server_2012

2 versions affected across 5 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-26: 1Patch / Workaround · 2026-08-26: 1Technical Details · 2026-08-26: 108-26
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Jamaica Cyber Incident Response Team (JaCIRT)@cirtgovjm
    Patch

    🚨URGENT ADVISORY🚨CVE-2015-1635, addressed by Microsoft security bulletin MS15-034, is a critical remote code execution vulnerability in the Windows HTTP protocol stack (HTTP.sys) CLICK HERE FOR MORE INFORMATION 👇 https://cirt.gov.jm/index.php/advisory/ms15-034-cve-2015-1635-persistently-recurring-httpsys-vulnerability-jamaican-networks #JaCIRT #NSOC #CVE #Microsoft #Windows https://t.co/F0kZECot5S

    Post summary

    An urgent advisory warns of CVE-2015-1635, a critical RCE in HTTP.sys, noting it was fixed in Microsoft bulletin MS15-034 and linking to the official advisory.

    0000091
    1.2K followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_7---
OSmicrosoftwindows_8---
OSmicrosoftwindows_8.1---
OSmicrosoftwindows_server_2008r2-itanium
OSmicrosoftwindows_server_2008r2-x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--

Explore more

Back to dashboardmicrosoft CVEswindows_7 vulnerabilities