{"schemaVersion":3,"id":"CVE-2015-2424","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft PowerPoint Memory Corruption Vulnerability","description":"Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Memory Corruption Vulnerability.\"","dates":{"published":"2015-07-14T21:00:00.000Z","modified":"2025-10-21T23:55:59.213Z","reserved":null,"kevAdded":["2022-03-03T00:00:00.000Z"],"kevDue":["2022-03-24T00:00:00.000Z"]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.40388,"percentile":0.98634,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":1.8910000000000038,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.38497},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.40388,"percentile":0.98634}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.38497,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.40388,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.40388,"percentile":0.98634}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft PowerPoint Memory Corruption Vulnerability","description":"Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-2424","label":"nvd.nist.gov/vuln/detail/CVE-2015-2424"}],"vendor":"Microsoft","product":"PowerPoint","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-24T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft PowerPoint Memory Corruption Vulnerability","description":"Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2015-2424","label":"nvd.nist.gov/vuln/detail/CVE-2015-2424"}],"vendor":"Microsoft","product":"PowerPoint","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-787","name":"Out-of-bounds Write","description":"The product writes data past the end, or before the beginning, of the intended buffer.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/787.html"}],"affected":[{"vendor":"microsoft","product":"excel_viewer","name":"excel viewer","label":"excel_viewer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2007:sp3","noFixRecorded":false,"fixedIn":null}],"versionsText":"2007:sp3","eol":null,"hubHref":"/vendor/microsoft/excel_viewer"},{"vendor":"microsoft","product":"office","name":"office","label":"office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2007:sp3","noFixRecorded":false,"fixedIn":null},{"text":"2010:sp2","noFixRecorded":false,"fixedIn":null},{"text":"2011","noFixRecorded":false,"fixedIn":null},{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2007:sp3 | 2010:sp2 | 2011 | 2013:sp1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"office","label":"Microsoft Office","category":"app"}},"hubHref":"/vendor/microsoft/office"},{"vendor":"microsoft","product":"office_compatibility_pack","name":"office compatibility pack","label":"office_compatibility_pack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/office_compatibility_pack"},{"vendor":"microsoft","product":"powerpoint","name":"powerpoint","label":"powerpoint","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2007:sp3","noFixRecorded":false,"fixedIn":null},{"text":"2010:sp2","noFixRecorded":false,"fixedIn":null}],"versionsText":"2007:sp3 | 2010:sp2","eol":null,"hubHref":"/vendor/microsoft/powerpoint"},{"vendor":"microsoft","product":"word","name":"Word","label":"word","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/word"},{"vendor":"microsoft","product":"word_viewer","name":"word viewer","label":"word_viewer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/word_viewer"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securitytracker.com/id/1032899","label":"www.securitytracker.com/id/1032899","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070","label":"docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070","hostname":"docs.microsoft.com","tags":["Vendor Advisory","X Refsource MS","Patch"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2424","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2424","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-07-14T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft PowerPoint Memory Corruption Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-03-24T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:59.213Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:01:32.467Z","stale":false,"partial":false}}