CVE-2015-1641

🗓️ 14 Apr 2015 20:00:00Reported by microsoftType

"CVE-2015-1641 Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability." NVD

Reporter	Title	Published	Views	Family All 37
ICS	Top 10 Routinely Exploited Vulnerabilities	12 May 202012:00	–	ics
ATTACKERKB	CVE-2015-1641	14 Apr 201500:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft Office software allows a malicious actor to execute arbitrary code with privileges of the current user.	7 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office Web Apps package allows a malicious actor to execute arbitrary code with privileges of the current user.	7 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors allows a malicious actor to execute arbitrary code with the privileges of the current user.	7 Jul 201600:00	–	bdu_fstec
Carbon Black Blog	Threat Analysis: Pylot (Travle) Malware Family	26 Jan 201817:46	–	carbonblack
Circl	CVE-2015-1641	7 Sep 201512:16	–	circl
CISA KEV Catalog	Microsoft Office Memory Corruption Vulnerability	3 Nov 202100:00	–	cisa_kev
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2015-02509)	15 Apr 201500:00	–	cnvd
Check Point Advisories	Microsoft Office Memory Corruption (MS15-033: CVE-2015-1641)	14 Apr 201500:00	–	checkpoint_advisories

NVD

Node

microsoft officeMatch2010sp2

microsoft office_compatibility_packMatch-sp3

microsoft office_web_appsMatch2010sp2

microsoft office_web_appsMatch2013sp1

microsoft outlookMatch2011mac_os_x

microsoft sharepoint_serverMatch2010sp2

microsoft sharepoint_serverMatch2013sp1

microsoft wordMatch2007sp3

microsoft wordMatch2010sp2

microsoft wordMatch2011macos

microsoft wordMatch2013sp1-

microsoft wordMatch2013sp1rt

Source	Link
securitytracker	www.securitytracker.com/id/1032104
securityfocus	www.securityfocus.com/bid/73995
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 00:22Current

9.4High risk

Vulners AI Score9.4

CVSS 3.17.8

CVSS 29.3

EPSS0.97327

SSVC