CVE-2015-2467
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption
CVSS
9.3
Sem CVSS
EPSS
27.7%
p98
KEV
—
Exploit Today
29
0-100
Publicado: 15 de ago. de 2015 · Última mod.: 9 de out. de 2026 · CWE-119
27.7%EPSS · 30 dias27.7%
2026-10-122026-11-10
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
- www.securitytracker.comhttp://www.securitytracker.com/id/1033239
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37913/
- www.securitytracker.comhttp://www.securitytracker.com/id/1033239
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37913/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1249488.8 ALT—
——0Incorrect boundary conditions, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, and Thunderbird 160.3hCVE-2026-1249966.3 MÉD16.2%
——5A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read. Remote exploitation of the attack is possible. Upgrading to version 1.6.4 is sufficient to resolve this issue. Patch name: c9a57ae832a3035e264e0a412e1daf4ebb699b98. Upgrading the affected component is recommended.1dCVE-2026-1249946.3 MÉD22.0%
——7A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3. The affected element is the function ngram_dequant of the file exllamav3/exllamav3_ext/ngram.cu of the component NGramEmbedding. The manipulation of the argument head_bias results in out-of-bounds read. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.4 is sufficient to fix this issue. The patch is identified as c9a57ae832a3035e264e0a412e1daf4ebb699b98. It is suggested to upgrade the affected component.5hCVE-2026-1245867.3 ALT33.2%
——10A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library include/rapidjson/internal/diyfp.h. This manipulation of the argument decimalPosition causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.4hCVE-2026-1245637.5 ALT45.6%
——14A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.2dCVE-2026-1245627.5 ALT45.6%
——14A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.1d