# CVEs published 2015-08-15

40 CVEs were published on August 15, 2015: 0 critical, 1 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2015-1642](https://cve.now/CVE-2015-1642.md): Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft O (CVSS 7.8, KEV)
- [CVE-2015-1769](https://cve.now/CVE-2015-1769.md): Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 (CVSS 6.6, KEV)
- [CVE-2015-2420](https://cve.now/CVE-2015-2420.md): Cross-site scripting (XSS) vulnerability in Microsoft System Center 2012 Operations Manager Gold before Rollup 8, SP1 before Rollup 10, and (no CVSS)
- [CVE-2015-2423](https://cve.now/CVE-2015-2423.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2428](https://cve.now/CVE-2015-2428.md): Object Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201 (no CVSS)
- [CVE-2015-2429](https://cve.now/CVE-2015-2429.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-2430](https://cve.now/CVE-2015-2430.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and (no CVSS)
- [CVE-2015-2431](https://cve.now/CVE-2015-2431.md): Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 all (no CVSS)
- [CVE-2015-2432](https://cve.now/CVE-2015-2432.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2433](https://cve.now/CVE-2015-2433.md): The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS)
- [CVE-2015-2434](https://cve.now/CVE-2015-2434.md): Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech (no CVSS)
- [CVE-2015-2435](https://cve.now/CVE-2015-2435.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2440](https://cve.now/CVE-2015-2440.md): Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "M (no CVSS)
- [CVE-2015-2453](https://cve.now/CVE-2015-2453.md): The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, W (no CVSS)
- [CVE-2015-2454](https://cve.now/CVE-2015-2454.md): The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se (no CVSS)
- [CVE-2015-2455](https://cve.now/CVE-2015-2455.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2456](https://cve.now/CVE-2015-2456.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2458](https://cve.now/CVE-2015-2458.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2459](https://cve.now/CVE-2015-2459.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2460](https://cve.now/CVE-2015-2460.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2461](https://cve.now/CVE-2015-2461.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2462](https://cve.now/CVE-2015-2462.md): ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo (no CVSS)
- [CVE-2015-2463](https://cve.now/CVE-2015-2463.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2464](https://cve.now/CVE-2015-2464.md): Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win (no CVSS)
- [CVE-2015-2465](https://cve.now/CVE-2015-2465.md): The Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server (no CVSS)
- [CVE-2015-2466](https://cve.now/CVE-2015-2466.md): Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka (no CVSS)
- [CVE-2015-2467](https://cve.now/CVE-2015-2467.md): Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption (no CVSS)
- [CVE-2015-2468](https://cve.now/CVE-2015-2468.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office C (no CVSS)
- [CVE-2015-2469](https://cve.now/CVE-2015-2469.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2015-2470](https://cve.now/CVE-2015-2470.md): Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer a (no CVSS)
- [CVE-2015-2471](https://cve.now/CVE-2015-2471.md): Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio (no CVSS)
- [CVE-2015-2472](https://cve.now/CVE-2015-2472.md): Remote Desktop Session Host (RDSH) in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and (no CVSS)
- [CVE-2015-2473](https://cve.now/CVE-2015-2473.md): Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server (no CVSS)
- [CVE-2015-2474](https://cve.now/CVE-2015-2474.md): Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server (no CVSS)
- [CVE-2015-2475](https://cve.now/CVE-2015-2475.md): Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and (no CVSS)
- [CVE-2015-2476](https://cve.now/CVE-2015-2476.md): The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server (no CVSS)
- [CVE-2015-2477](https://cve.now/CVE-2015-2477.md): Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2015-2479](https://cve.now/CVE-2015-2479.md): The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers (no CVSS)
- [CVE-2015-2480](https://cve.now/CVE-2015-2480.md): The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers (no CVSS)
- [CVE-2015-2481](https://cve.now/CVE-2015-2481.md): The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.