CVE

CVE-2012-2539

Microsoft Word Remote Code Execution Vulnerability

Microsoft · Word

Date added (CISA)

2022-03-28

Remediation due

2022-04-18

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.