MS15-033 - Vulnerabilities in Microsoft Office Could Allow Remote Code Execution

Bulletin ID: 

MS15-033

Severity: 

Critical

Description: 

This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Revision Note: V1.1 (April 21, 2015): Revised bulletin to announce a detection change for the 2553428 update for supported editions of Microsoft Word 2010. There were no changes to the update files. Customers who have already successfully updated their systems do not need to take any action.

Security advisory: 

Related content