01 Record
CVE-2015-6093
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office
UnratedPUBLISHEDCNA: microsoft
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office
03 Exploitation and scoring
- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
- Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.
- EPSS probability
- 23.20% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 97.7% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-10-14.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2015-11-11 11:00Z10 YR AGO
- Last updated
- 2026-10-14 21:32Z14 DAYS AGO
- Reserved
- 2015-08-14
- Assigning CNA
- microsoft
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
- Data version
- 5.2
- Document digest
- a1d8422741ead7561d2683b473322ce054cd2798f62afd223b482b97b47e625e
05 Affected products
VendorProductVersionsPlatforms
06 References
- www.securityfocus.com77491http://www.securityfocus.com/bid/77491
- www.securitytracker.com1034122http://www.securitytracker.com/id/1034122
- docs.microsoft.comMS15-116https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-116
- www.securitytracker.com1034118http://www.securitytracker.com/id/1034118
- www.zerodayinitiative.comhttp://www.zerodayinitiative.com/advisories/ZDI-15-539