CVE-2015-1722 — Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Bitmap Handling Use After Free Vulnerability."

Back Back to CVE browser

HIGH

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Bitmap Handling Use After Free Vulnerability."

Published Jun 10, 2015

7.2

HIGH

CVSS 2.0

EPSS 3.48%

Description

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Bitmap Handling Use After Free Vulnerability."

Remediation

No remediation recorded yet.

Metrics

3.48% 0.03477

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03477

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.48% (0.03477)	88.71th	v5 (v2026.06.15)
Jun 15, 2026	3.48% (0.03477)	87.53th	v5 (v2026.06.15)
Mar 29, 2025	3.86% (0.03864)	80.08th	v4 (v2025.03.14)
Mar 17, 2025	2.34% (0.02344)	83.77th	v4 (v2025.03.14)
Jan 20, 2025	13.30% (0.13299)	95.58th	v3 (v2023.03.01)
Dec 17, 2024	10.84% (0.10843)	95.08th	v3 (v2023.03.01)
Dec 12, 2024	0.05% (0.00047)	19.21th	v3 (v2023.03.01)
May 8, 2024	0.05% (0.00047)	16.26th	v3 (v2023.03.01)
Mar 7, 2023	0.05% (0.00047)	14.22th	v3 (v2023.03.01)
Mar 6, 2023	1.96% (0.01961)	78.50th	v2 (v2022.01.01)
Apr 1, 2022	1.96% (0.01961)	76.61th	v2 (v2022.01.01)
Feb 4, 2022	1.96% (0.01961)	55.74th	v2 (v2022.01.01)

Weaknesses (1)

CWE-416

Use After Free

References (4)

http://www.securitytracker.com/id/1032525
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061
vendor-advisoryx_refsource_MSPatchVendor Advisory
https://www.exploit-db.com/exploits/38265/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/38275/
exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.securitytracker.com/id/1032525		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-061		vendor-advisoryx_refsource_MSPatchVendor Advisory
https://www.exploit-db.com/exploits/38265/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/38275/		exploitx_refsource_EXPLOIT-DBThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jun 10, 2015

Updated Aug 6, 2024

Reserved Feb 17, 2015

Link CVE-2015-1722

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-1722

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-1722