CVE-2014-6362: Microsoft Office

Medium severity, CVSS 4.3. EPSS: 16.2% chance of exploitation in the next 30 days.

Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."

Affected products

• Microsoft Office: version 2007 only; version 2010 only; version 2013 only

Published 2015-02-11. Last modified 2026-06-17.