CVE-2015-2520

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

Office Excel, Excel Viewer, Excel For Mac, Office Compatibility Pack, Office

Microsoft Excel

= 2007, 2010, 2011, 2013, 2016

Microsoft Excel Viewer

All versions

Microsoft Office Compatibility Pack

All versions

CVSS 2.0

9.3 HIGH

EPSS

27.7% (98th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2015-09-09