VULNERABILITY INTELLIGENCE
CVE-2014-6362
CVSS score4.3 MEDIUM
EPSS probability16.16%
CISA KEVNot currently listed
Published2015-02-11
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."