Elevated Privilege Vulnerability in Microsoft Office Products

CVE-2015-2503

Summary

This vulnerability allows remote attackers to exploit Microsoft Office products by bypassing the sandbox protection mechanisms through a specially crafted website accessed via Internet Explorer. Successful exploitation could lead to a transition from Low Integrity to Medium Integrity, enabling an attacker to gain extra privileges in the system. The affected products span multiple versions of Microsoft Office, including key applications such as Word, Excel, PowerPoint, and others from 2007 to 2016. Users should apply the latest security updates to mitigate this risk.

References