← CVE Radar
CVE-2015-2424Microsoft PowerPoint Memory Corruption Vulnerability
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
8.8 HIGHEPSS 40.12%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2015-2424
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jul 14, 2015
- Last modified
- 2026-06-17 00:24 UTC
Affected Products
From NVD CPE configurations.
microsoftexcel viewer1 version range
- 2007 sp3
microsoftoffice4 version ranges
- 2007 sp3
- 2010 sp2
- 2011
- 2013 sp1
microsoftoffice compatibility pack0 version ranges
No version detail published.
microsoftpowerpoint2 version ranges
- 2007 sp3
- 2010 sp2
microsoftword1 version range
- 2013 sp1
microsoftword viewer0 version ranges
No version detail published.