CVE-2015-1650: Use After Free
Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1650?
CVE-2015-1650 has a severity rating of critical due to its potential to allow remote code execution.
How do I fix CVE-2015-1650?
To address CVE-2015-1650, apply the latest security updates provided by Microsoft for affected versions of Office and related applications.
Which versions of Microsoft Office are affected by CVE-2015-1650?
CVE-2015-1650 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2013 SP1, Word Viewer, and certain versions of SharePoint Server and Office Web Apps.
Can CVE-2015-1650 be exploited remotely?
Yes, CVE-2015-1650 can be exploited remotely by an attacker through a specially crafted Word document.
What are the potential consequences of CVE-2015-1650?
Exploitation of CVE-2015-1650 may result in an attacker gaining the ability to execute arbitrary code on the affected system.