CVE-2015-2468

Microsoft Office - Remote Code Execution via Crafted Document

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-2468. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in Microsoft Office 2007 (CVE-2015-2468), specifically an arbitrary free vulnerability in mso.dll. The PoC requires memory spraying to control the freed address, leading to potential remote code execution.

Description

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/37912

This exploit targets a memory corruption vulnerability in Microsoft Office 2007 (CVE-2015-2468), specifically an arbitrary free vulnerability in mso.dll. The PoC requires memory spraying to control the freed address, leading to potential remote code execution.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Complex
Reliability
Racy
Target: Microsoft Office 2007 (mso.dll 12.0.6721.5000, wwlib.dll 12.0.6720.5000)
No auth needed
Prerequisites: Microsoft Office 2007 with Office File Validation Add-In disabled · Memory spraying to control address 0x00019910
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/37912/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033239

Scores

EPSS 0.7176
EPSS Percentile 98.8%

Details

CWE
CWE-119
Status published
Products (12)
microsoft/office 2010 sp2
microsoft/office 2011
microsoft/office 2016
microsoft/office_compatibility_pack
microsoft/sharepoint_server 2010 sp2
microsoft/sharepoint_server 2013 sp1
microsoft/word 2007 sp3
microsoft/word 2010 sp2
microsoft/word 2013 sp1 (2 CPE variants)
microsoft/word_viewer
... and 2 more
Published Aug 15, 2015
Tracked Since Feb 18, 2026