Microsoft Patch Tuesday, April 2015: the CVEs

Filter

Microsoft Patch Tuesday April 2015: the CVEs Microsoft published on 14 April 2015, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2015, Feb 2015, Jan 2015, Dec 2014, Nov 2014, Oct 2014, Sep 2014, Aug 2014, Jul 2014, Jun 2014, May 2014, Apr 2014. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

9.8CVE-2015-1635KEVExploitEPSS >99.9%2015-04-14
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution V…