What is CVE-2015-1649?

CVE-2015-1649 is a vulnerability in Microsoft Office. Published 2015-04-14.

Is CVE-2015-1649 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Office

CVE-2015-1649

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps Server 2010 SP2 allows remote…

EPSS: 0.548 (98.1th percentile) — read the EPSS interpretation.

Affected products

Microsoft Office — versions 2010
Microsoft Office_compatibility_pack
Microsoft Office_web_apps — versions 2010, 2013
Microsoft Sharepoint_server — versions 2010, 2013
Microsoft Word — versions 2007, 2010, 2013
Microsoft Word_viewer
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

1032104 (vdb-entry, x_refsource_SECTRACK)
MS15-033 (x_refsource_MS, vendor-advisory)

Frequently asked questions

What is CVE-2015-1649?: CVE-2015-1649 is a vulnerability in Microsoft Office. Published 2015-04-14.
Is CVE-2015-1649 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.