CVE-2014-1761

A memory corruption flaw in Microsoft Word allowed remote code execution and was actively exploited in the wild.

Microsoft Word contained a memory corruption vulnerability enabling remote code execution, which was actively exploited in the wild. DIB organizations must ensure all Office applications are patched to prevent attackers from executing arbitrary code on their systems. This failure highlights the risk of relying on unpatched software, even from trusted vendors.

Shame score — A known memory corruption vulnerability in a widely used application was actively exploited in the wild, demonstrating the severe consequences of unpatched software and the ongoing threat of remote code execution attacks.