← ExploitWatch
HomeExploited Vulnerabilities

CVE-2015-1635 — Actively Exploited: HTTP.sys (Microsoft)

Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.

CVE IDCVE-2015-1635
VendorMicrosoft
ProductHTTP.sys
Vulnerability nameMicrosoft HTTP.sys Remote Code Execution Vulnerability
Date added2022-02-10
Remediation due2022-08-10
Known ransomware useUnknown
Required actionApply updates per vendor instructions.
DescriptionMicrosoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →