Live › vulnerability › CVE-2015-1635
Go to dashboardMicrosoft HTTP.sys, the Windows kernel HTTP stack, contains a flaw that allows remote code execution. CISA lists it as actively exploited in the wild, with an EPSS score of 1.000.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft HTTP.sys | vendor | – | – |
Check whether Windows Server or Windows hosts run HTTP.sys listeners (IIS, WinRM, or other HTTP services) and whether the MS15-034 update is installed; exact commands unknown from sources.
Apply the Microsoft update for HTTP.sys per vendor instructions (CISA required action); the specific KB number is unknown from sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2015-1635")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.