CVE-2015-2502VulnerabilityPublished 04/13/2022Updated 10/24/2026
CVE-2015-2502: Microsoft Internet Explorer Memory Corruption Vulnerability
Affects Microsoft Internet ExplorerSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 04/13/2022
- KEV deadline
- 05/04/2022
- EPSS
- 51.0% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2015-2502 is a memory corruption vulnerability in Microsoft Internet Explorer that enables attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data.