CVE-2015-1770

A remote code execution vulnerability in Microsoft Office allowed attackers to execute arbitrary code via a crafted document.

This unpatched RCE flaw in Microsoft Office enabled remote code execution through malicious documents, posing a severe threat to DIB organizations relying on Office for daily operations. The vulnerability was actively exploited in the wild, indicating that organizations must ensure their Office suites are fully patched to prevent compromise. Compliance officers should verify that all Office components are updated to mitigate this high-severity risk.

Shame score — The vulnerability was unpatched and actively exploited in the wild, demonstrating a failure to patch known critical flaws and exposing organizations to remote code execution.