← All CVEs

CVE-2015-2466

high · 9.3

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability."

9.3
CVSS
17.2%
EPSS (exploit prob.)
97th
EPSS percentile
2015-08-15
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
microsoftoffice2007
microsoftoffice2010
microsoftoffice2013

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-2466