CVE-2015-1671

KEVMicrosoft Windows Remote Code Execution Vulnerability

Description

A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.

The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

CVSS 3.1 vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

PublishedMay 13, 2015

Last modifiedJun 17, 2026

Added to KEVMay 25, 2022

Remediation dueJun 15, 2022

References

securityfocus.com/bid/74490Broken LinkThird Party Advisory
securitytracker.com/id/1032281Broken LinkThird Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044PatchVendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1671US Government Resource

0 recent articles mention this CVE

Risk assessment · High

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 1595 days
CVSS: 7.8 HIGH
EPSS (30-day exploit probability): 48.8% · top 1% of all CVEs
Weakness: NVD-CWE-noinfo

Recommended actions

1.Apply updates per vendor instructions.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.