// CVE

CVE-2015-1635

no CVSS

n/a n/a

—CVSS

100%EPSS

—CISA KEV

Summary

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution V…

Published: 2015-04-14

Analysis

🟠 High — imminent exploitation

Status: Exploit probability (EPSS, 30 days): 100% — high.

How to defend:

Apply the vendor patch according to risk priority.
Detect: turn this CVE into detection rules.

🔗 NVD record 🌉 CVE → detection 🎯 Am I exposed? ⚖️ Prioritize patch

← Back to the Threat Radar

Sources: CISA KEV · EPSS · FIRST.org · NVD. Analysis derived from the CVSS vector and exploitation status (no AI). Informational; always verify against the vendor's official advisory.