CVE-2015-2470: microsoft office Numeric Errors
Vulnerability summary
CVE-2015-2470 is a high (CVSS 9.3) Numeric Errors vulnerability in microsoft office. EPSS estimates a 26.86% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-08-2015PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
26.86%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 26.86% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Office 2007 - MSPTLS Heap Index Integer Underflow (MS15-081)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
1 vendor · 2 products
References
3 links
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081Vendor AdvisoryX Refsource MS