High · 7.8 Known exploited CVE-2015-1642 EUVD-2015-1772GHSA-f9w6-fcw4-8qmv

Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft …

Published Aug 15, 2015 · Updated Oct 21, 2025 · Assigned by microsoft

Description

Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

References

20150901 Microsoft Word "TaskSymbol Control" Use After Free Vulnerability third-party-advisory
MS15-081 vendor-advisory
1033239 vdb-entry