CVE-2015-1642
Microsoft Office Memory Corruption Vulnerability
Published Aug 14, 2015 · updated Jun 16, 2026 · microsoft office
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Timeline
Detection, updates, and resolution for this record.
Aug 14, 2015 · Catalog
Detected
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 24, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Required action
Apply updates per vendor instructions.
CISA due date Mar 24, 2022
Affected
- cpe microsoft/office2007
- cpe microsoft/office2010
- cpe microsoft/office2013
- vendor Microsoft Officeversion unspecified
Sources
- CISA KEVCVE-2015-1642
Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.
cisa.gov - CVE.orgCVE-2015-1642
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-1642
30-day exploitation probability 53.1%
first.org - NIST NVDCVE-2015-1642
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
nvd.nist.gov