EXPOSURES › CVE-2015-2424
CVE-2015-2424
HIGH ⌖ ON CISA KEV · EXPLOITEDA memory corruption flaw in PowerPoint allowed remote attackers to execute arbitrary code via a crafted document.
Microsoft PowerPoint contained a memory corruption vulnerability enabling remote code execution through malicious Office documents. DIB organizations must ensure all Office applications are patched, as unpatched versions remain actively exploited in the wild. This failure highlights the ongoing risk of legacy software and the necessity of rigorous patch management to prevent compromise.
Shame score — A known memory corruption vulnerability remained unpatched long enough to be added to the KEV catalog, indicating a failure in timely patch deployment and leaving systems exposed to active exploitation.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
"Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document."
"CISA's Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."
"CISA has added fifteen newly verified exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV Catalog) for October 2025, covering flaws in Microsoft, Oracle, Apple, Juniper, and Cisco products."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |