High 7.8Known exploited (CISA KEV)Published Apr 14, 2015

CVE-2015-1641Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and…

Updated under an hour ago (2026-10-19 08:40 UTC)

Does this affect you?

It affects microsoft office and 5 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Nov 3, 2021; federal agencies had to remediate by May 3, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for microsoft office

Exploited in the last 30 days

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS: 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-787
Known exploited: Added to CISA KEV Nov 3, 2021; federal remediation due May 3, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 97.25% (percentile 100)
Assigned by: microsoft
NVD analysis: Analyzed
Record last updated: Oct 21, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

microsoft office microsoft:office	2010	NVD
microsoft office_compatibility_pack microsoft:office_compatibility_pack	all versions	NVD
microsoft office_web_apps microsoft:office_web_apps	2010; 2013	NVD
microsoft outlook microsoft:outlook	2011	NVD
microsoft sharepoint_server microsoft:sharepoint_server	2010; 2013	NVD
microsoft word microsoft:word	2007; 2010; 2011; 2013; 2013	NVD

References

http://www.securitytracker.com/id/1032104vdb-entry, x-refsource-sectrack, broken-link, third-party-advisory
http://www.securityfocus.com/bid/73995vdb-entry, x-refsource-bid, broken-link, third-party-advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033vendor-advisory, x-refsource-ms, patch
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1641us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.