Findings

CVE-2015-2469

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsof…

Published Aug 15, 2015 · updated Oct 14, 2026 · microsoft office

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 15, 2015 · NIST NVD

    Detected

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

  2. Jun 17, 2026 · NIST NVD

    Updated

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

  3. Oct 14, 2026 · NIST NVD

    Updated

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected

  • cpe microsoft/office2010
  • cpe microsoft/office2011
  • cpe microsoft/word2007
  • cpe microsoft/word2010

Sources

  • CVE.orgVulnerability recordCVE-2015-2469

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-2469

    30-day exploitation probability 26.9%

    first.org
  • Exploit DatabasePublic exploit reference37910

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDVulnerability recordCVE-2015-2469

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

    nvd.nist.gov

References

CVE-2015-2469 · ZeroDay Findings