What is CVE-2015-1650?

CVE-2015-1650 is a vulnerability in Microsoft Office. Published 2015-04-14.

Is CVE-2015-1650 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Office

CVE-2015-1650

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and…

EPSS: 0.608 (98.3th percentile) — read the EPSS interpretation.

Affected products

Microsoft Office — versions 2010
Microsoft Office_compatibility_pack
Microsoft Office_web_apps — versions 2010, 2013
Microsoft Sharepoint_server — versions 2010, 2013
Microsoft Word — versions 2007, 2010, 2013
Microsoft Word_viewer
N/a — versions n/a

Public proof-of-concept exploits

References

1032104 (vdb-entry, x_refsource_SECTRACK)
MS15-033 (x_refsource_MS, vendor-advisory)

Frequently asked questions

What is CVE-2015-1650?: CVE-2015-1650 is a vulnerability in Microsoft Office. Published 2015-04-14.
Is CVE-2015-1650 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.