CVE detail
CVE-2006-2492 — Microsoft Word Malformed Object Pointer Vulnerability
Published 2022-06-08 · Modified 2022-06-08 · Source kev
HIGH
severity
CVSS-derived band
0.4839
EPSS probability
exploitation probability, 30d
99.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2022-06-22
⚠ Actively exploited in the wild — CISA KEV listed 2022-06-08, federal remediation due 2022-06-22.
Description
Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References