CVE-2013-3155: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execut...

Security readout for executives and security teams

CVE-2013-3155 is an old Microsoft Access vulnerability where a malicious Access file could crash Access or run attacker-controlled code. The business risk is highest where users still open Access files in affected Office versions or legacy systems retain vulnerable installations. Exposure is likely limited to endpoints or virtual desktops running the listed Microsoft Access versions and processing untrusted Access files. Modern environments without these versions should have low direct exposure, but legacy Office assets remain relevant. Treat this as a legacy endpoint risk with high impact but evidence-limited urgency. Prioritize if affected Access versions remain in use, especially where users receive external files. Mitigation focus: Apply the Microsoft security update guidance in MS13-074.; Inventory endpoints for affected Microsoft Access versions.; Restrict untrusted Access file handling on legacy systems..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.