CVEvulnerability

CVE-2015-2424

8.8 HIGH Known exploited Published 2015-07-14 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Microsoft PowerPoint Memory Corruption Vulnerability — Microsoft PowerPoint

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.

Added to KEV: 2022-03-03
Remediation due: 2022-03-24
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2015-2424

Status: Analyzed
Published: 2015-07-14
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-787

Description

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected configurations

• microsoft excel viewer 2007 • microsoft office 2007 • microsoft office 2010 • microsoft office 2011 • microsoft office 2013 • microsoft office compatibility pack • microsoft powerpoint 2007 • microsoft powerpoint 2010 • microsoft word 2013 • microsoft word viewer

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References