{"id":"CVE-2015-2469","title":"Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","summary":"Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","severity":"critical","cvss":9.3,"cvssVector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","cwe":["CWE-119"],"vendor":"microsoft","product":"office","affected":["office = 2010","office = 2011","word = 2007","word = 2010"],"published":"2015-08-15","updated":"2026-10-14","sourceUpdated":"2026-10-14T22:17:04.267","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2015-2469","references":[{"url":"http://www.securitytracker.com/id/1033239","label":"secure@microsoft.com"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081","label":"secure@microsoft.com"},{"url":"https://www.exploit-db.com/exploits/37910/","label":"secure@microsoft.com"},{"url":"http://www.securitytracker.com/id/1033239","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/37910/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.26857,"epssPercentile":0.98011,"exploits":{"exploitdb":true,"checkedAt":"2026-10-14T23:00:36.672Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T23:00:01.989Z","slug":"CVE-2015-2469","body":"## Overview\n\nMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office Memory Corruption Vulnerability.\"\n\n## Affected\n\n- `office = 2010`\n- `office = 2011`\n- `word = 2007`\n- `word = 2010`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":69,"depthScoreParts":{"impact":51.2,"likelihood":5.4,"exploitation":12,"ransomware":0},"changes":[]}