coldbraid

CVE-2015-1641 Microsoft Office

Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user.

CVSS
not scored

CWE-399

On CISA’s exploited list

Microsoft Office Memory Corruption Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)