What is CVE-2015-2515?

CVE-2015-2515 is a vulnerability in Microsoft Windows 10, classified under Use After Free. Published 2015-10-14.

Is CVE-2015-2515 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Microsoft Windows 10

CVE-2015-2515

Use-after-free vulnerability in Windows Shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows remote attackers to execute arbitrary code via a crafted toolbar object, aka "Toolbar Use After Free Vulnerability."

Vulnerability class: Use-After-Free

EPSS: 0.287 (97.9th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_10
Microsoft Windows_7
Microsoft Windows_8
Microsoft Windows_8.1
Microsoft Windows_rt
Microsoft Windows_rt_8.1
Microsoft Windows_server_2008 — versions r2
Microsoft Windows_server_2012 — versions r2
Microsoft Windows_vista
N/a — versions n/a

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

References

secure@microsoft.com (x_refsource_MS, vendor-advisory, Patch, Vendor Advisory)
secure@microsoft.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2015-2515?: CVE-2015-2515 is a vulnerability in Microsoft Windows 10, classified under Use After Free. Published 2015-10-14.
Is CVE-2015-2515 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.