Microsoft Windows Kernel - Use-After-Free with Cursor Object (MS15-097)

Source: https://code.google.com/p/google-security-research/issues/detail?id=457 --- The attached testcase crashes Win 7 with Special Pool enabled while accessing the freed global cursor object gpqCursor. See poc.cpp for instructions on how to compile and run. Proof of Concept:...

Microsoft Windows Kernel - 'SURFOBJ' Null Pointer Dereference (MS15-061)

Source: https://code.google.com/p/google-security-research/issues/detail?id=312 This issue is very likely a null pointer issue affecting 32-bit Windows version. The offset is from add onto another offset which isn't quite zero, so not 100% convinced it is just a null pointer, however I wasn't abl...

Microsoft Windows Kernel - 'UserCommitDesktopMemory' Use-After-Free (MS15-073)

Source: https://code.google.com/p/google-security-research/issues/detail?id=335 Freed memory is accessed after switching between two desktops of which one is closed. The testcase crashes with and without special pool enabled. The attached crash output is with special enabled on win32k.sys and...

CVE-2015-7765

creationtimestamp| type| source ---|---|--- 2015-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38221 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengineopmanagerrce.rb 2025-02-06...

CVE-2015-7766

creationtimestamp| type| source ---|---|--- 2015-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38221 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengineopmanagerrce.rb 2025-02-06...

CVE-2015-2523

creationtimestamp| type| source ---|---|--- 2015-09-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38214...

CVE-2015-2525

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38200 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-2527

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38199 2026-07-29 12:01:17+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:50+00:00| seen|...

CVE-2015-2528

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38201 2026-07-29 12:01:34+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 01:01:19+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-7309

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38196 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/boltfileupload.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2015-2524

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38202 2026-07-29 12:01:26+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:54+00:00| seen|...

CVE-2015-2508

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38198 2026-07-29 12:01:29+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 01:01:16+00:00| seen|...

CVE-2015-2509

creationtimestamp| type| source ---|---|--- 2015-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38195 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms15100mclexe.rb 2025-02-06 03:13:42+00:00|...

CVE-2015-6834

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38120 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38122 2025-07-18 22:39:10+00:00| seen| https://t.me/HackBlaz/29...

CVE-2015-6835

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38123 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2015-5082

creationtimestamp| type| source ---|---|--- 2015-09-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38096 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/efwchpasswdexec.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2015-5995

creationtimestamp| type| source ---|---|--- 2015-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41402...

CVE-2015-6809

creationtimestamp| type| source ---|---|--- 2015-09-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38051...

CVE-2015-7243

creationtimestamp| type| source ---|---|--- 2015-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38035 2018-07-02 19:07:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/boxoftwavtomp3.rb 2018-07-03 00:00:00+00:00|...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Tcpdump

CVE-2015-2153 An implement...