CVE-2015-2424

A memory corruption flaw in PowerPoint allowed remote attackers to execute arbitrary code via a crafted document.

Microsoft PowerPoint contained a memory corruption vulnerability enabling remote code execution through malicious Office documents. DIB organizations must ensure all Office applications are patched, as unpatched versions remain actively exploited in the wild. This failure highlights the ongoing risk of legacy software and the necessity of rigorous patch management to prevent compromise.

Shame score — A known memory corruption vulnerability remained unpatched long enough to be added to the KEV catalog, indicating a failure in timely patch deployment and leaving systems exposed to active exploitation.