CVE-2006-2492: Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft...

Security readout for executives and security teams

CVE-2006-2492 is a Microsoft Word buffer overflow where a malicious Word document could run attacker-controlled code after a user opens it. It affected legacy Office and Works Suite versions. Because CISA lists it in KEV and the record cites zero-day use, any remaining vulnerable installations should be treated as urgent legacy risk. Exposure is most likely on systems that can still open documents with Office 2000 SP3, Office XP SP3, Office 2003 SP1/SP2, or Microsoft Works Suites through 2006. Modern environments may still be exposed through old workstations, archived images, isolated business systems, or unmanaged endpoints. Prioritize this where legacy Microsoft Office remains in production or can process inbound documents. The vulnerability is old, but KEV status means it has been exploited and should not remain unresolved on any business-critical or internet-connected workflow. Mitigation focus: Apply Microsoft MS06-027 security updates where applicable.; Retire or replace unsupported Office and Works Suite installations.; Inventory endpoints for vulnerable Word, Office, and Works versions..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.