CVE-2015-6093
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Offi…
Published Nov 11, 2015 · updated Oct 14, 2026 · n/a n/a
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Timeline
Detection, updates, and resolution for this record.
Nov 11, 2015 · NIST NVD
Detected
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Oct 14, 2026 · NIST NVD
Updated
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected
- cpe microsoft/office2007
- cpe microsoft/office2010
- cpe microsoft/office2013
- cpe microsoft/office2016
- cpe microsoft/office web apps2010
- cpe microsoft/office web apps server2013
- cpe microsoft/sharepoint server2010
- cpe microsoft/sharepoint server2013
- vendor n/a n/aversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2015-6093
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a
vulnerability.circl.lu - CVE.orgCVE-2015-6093
Official CVE identifier
cve.org - FIRST EPSSCVE-2015-6093
30-day exploitation probability 23.2%
first.org - NIST NVDCVE-2015-6093
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a
nvd.nist.gov