VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 03:19 UTC

CVE-2015-1641

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers…

Read full description

CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.7/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 7.8: +1.17
Fresh EPSS: 97.25%: +0.49

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

Sophos

Press · 15 May 2020, 07:00 · Top 10 most exploited vulnerabilities list released by FBI, DHS CISA - Sophos

Bitdefender

Press · 13 May 2020, 07:00 · U.S Government Lists CVEs Most Exploited by Foreign Cyber Adversaries - Bitdefender

Bitdefender

Press · 13 May 2020, 07:00 · U.S Government Lists CVEs Most Exploited by Foreign Cyber Adversaries - Bitdefender

Homeland Security Today

Press · 12 May 2020, 07:00 · Top 10 Routinely Exploited Vulnerabilities - Homeland Security Today

CrowdStrike

Press · 01 Aug 2018, 07:00 · Arrests Put New Focus on CARBON SPIDER Adversary Group - CrowdStrike

See all 11 source documents

Unit 42

Press · 28 Sep 2017, 07:00 · Threat Actors Target Government of Belarus Using CMSTAR Trojan - Unit 42

Help Net Security

Press · 08 Feb 2017, 08:00 · AKBuilder: A builder for exploit-laden Word documents - Help Net Security

The Citizen Lab

Press · 17 Nov 2016, 08:00 · It’s Parliamentary: KeyBoy and the Targeting of the Tibetan Community - The Citizen Lab

Unit 42

Press · 14 Jun 2016, 07:00 · New Sofacy Attacks Against US Government Agency - Unit 42

Google Cloud

Press · 20 May 2016, 07:00 · How RTF malware evades static signature-based detection - Google Cloud

Hackread

Press · 08 Feb 2016, 08:00 · New Malware Targets Skype Users, Saves Screenshots, Records Conversations - Hackread

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.7 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 7.8; EPSS 97.2%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: local access, no prior privileges, user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:57:39.719437+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

14 Apr 2015, 20:00

First press mention

08 Feb 2016, 08:00

Latest press mention

15 May 2020, 07:00

Added to the CISA KEV catalog

03 Nov 2021, 00:00

Score calculated

05 Nov 2026, 13:57