ZeroDay Findings
Sign inSign up

Findings

CVE-2015-1770

Microsoft Office Uninitialized Memory Use Vulnerability

Published Jun 9, 2015 · updated Jun 16, 2026 · microsoft office

Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."

Timeline

Detection, updates, and resolution for this record.

  1. Jun 9, 2015 · Catalog

    Detected

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."

  2. Mar 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."

Required action

Apply updates per vendor instructions.

CISA due date Apr 18, 2022

Affected

  • cpe microsoft/office2013
  • vendor Microsoft Officeversion unspecified

Sources

  • CISA KEVCVE-2015-1770

    Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.

    cisa.gov
  • CVE.orgCVE-2015-1770

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2015-1770

    30-day exploitation probability 35.0%

    first.org
  • NIST NVDCVE-2015-1770

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."

    nvd.nist.gov

References