CVE-2015-1642VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2015-1642: Microsoft Office Memory Corruption Vulnerability

Affects Microsoft OfficeSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/24/2022
EPSS: 53.1% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2015-1642 (opens in a new tab)

Description

CVE-2015-1642 is a memory corruption vulnerability in Microsoft Office that allows remote attackers to execute arbitrary code via a crafted document. It has been exploited in the wild and is considered a high severity threat.

Summary

Microsoft Office contains a memory corruption vulnerability identified as CVE-2015-1642. This flaw allows remote attackers to execute arbitrary code by convincing a user to open a specially crafted document. The vulnerability is related to improper handling of memory, classified under CWE-119. It has been observed in active exploitation scenarios.

Impact

Successful exploitation of this vulnerability enables remote code execution, potentially allowing attackers to take control of affected systems running Microsoft Office. This can lead to unauthorized actions including data theft, system compromise, or further malware deployment.

Mitigation

No specific patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the official Microsoft advisory for current remediation guidance. Users should apply all relevant security updates from Microsoft to mitigate this vulnerability.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:26:03 UTC

Weaknesses

References

Related threats