CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2015-24248.8/HIGHEPSS 40.1%CISA KEV

2015-07-14

Microsoft Office Word & PowerPoint Memory Corruption Remote Code Execution Vulnerability (CVE-2015-2424, MS15-070)

[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1 (Word and PowerPoint)

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (DoS) via a crafted Office document

[Mitigation] Apply the MS15-070 security update immediately and restrict opening untrusted Office documents