CVE-2015-2468
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office C
CVSS
9.3
Sem CVSS
EPSS
43.4%
p99
KEV
—
Exploit Today
30
0-100
Publicado: 15 de ago. de 2015 · Última mod.: 14 de out. de 2026 · CWE-119
29.5%EPSS · 30 dias43.4%
2026-10-112026-11-08
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
- www.securitytracker.comhttp://www.securitytracker.com/id/1033239
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37912/
- www.securitytracker.comhttp://www.securitytracker.com/id/1033239
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081
- www.exploit-db.comhttps://www.exploit-db.com/exploits/37912/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1245867.3 ALT—
———A vulnerability was determined in Tencent RapidJSON 1.1.0. Impacted is the function GetCachedPowerByIndex in the library include/rapidjson/internal/diyfp.h. This manipulation of the argument decimalPosition causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.5hCVE-2026-1245637.5 ALT—
———A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.11hCVE-2026-1245627.5 ALT—
———A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.11hCVE-2026-1245617.5 ALT—
———A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.11hCVE-2026-1245609.8 CRÍ—
———A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.12hCVE-2026-1240609.1 CRÍ43.3%
——13A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.1h