CVE-2015-1635

Microsoft HTTP.sys contained a remote code execution vulnerability that was actively exploited in the wild.

The HTTP.sys component in Microsoft Windows allowed attackers to execute arbitrary code remotely, a flaw that was actively exploited in the wild and later added to CISA's Known Exploited Vulnerabilities (KEV) catalog. For DIB organizations, this highlights the severe risk of relying on unpatched, widely deployed software components, as an actively exploited RCE can lead to full system compromise, data exfiltration, and ransomware deployment. Organizations must rigorously patch known vulnerabilities, especially those flagged in the KEV catalog, and monitor for exploitation attempts on their infrastructure.

Shame score — A critical remote code execution vulnerability in a core Windows component was actively exploited in the wild, demonstrating severe negligence in patch management and leaving systems vulnerable to widespread compromise.