CVE-2010-3146: Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privi...

Security readout for executives and security teams

This is an old Microsoft Groove 2007 SP2 flaw where the application may load a library from an unsafe folder. A local user could abuse that behavior to gain higher privileges if a crafted library is present where Groove opens certain files. Evidence does not show active exploitation or a CVSS score. Exposure is most likely in legacy systems still running Microsoft Groove 2007 SP2, especially where users open Groove-related files from shared, removable, or otherwise untrusted directories. The provided CVE data lacks CPE and version detail beyond Groove 2007 SP2. Treat this as a legacy exposure cleanup item unless Groove 2007 remains in active use. Priority rises where old Office components run on shared workstations, terminal servers, or environments with loose file-share controls. Mitigation focus: Apply Microsoft guidance and updates from MS11-016.; Inventory and remove Microsoft Groove 2007 SP2 where no longer required.; Restrict opening .vcg and .gta files from untrusted locations..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.