CVE-2011-0107: Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows...

Security readout for executives and security teams

This flaw affects older Microsoft Office releases and involves how Office loads supporting library files. If a malicious library is placed in the same working folder as an Office document, Office may load it, allowing code execution or privilege gain in that context. Exposure is most likely where the named Office versions remain installed, especially on endpoints that open Office documents from shared, downloaded, or otherwise untrusted directories. Treat this as a legacy endpoint risk. It is not KEV-listed in the supplied data, but affected Office installations should be patched or retired because the weakness enables code execution through normal document handling. Mitigation focus: Apply the Microsoft security update referenced in MS11-023 where applicable.; Inventory and remove or upgrade the affected Office versions.; Avoid opening Office documents from untrusted folders or shared locations..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.