CVE-2013-3854: Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a den...

Security readout for executives and security teams

A malicious Office document could make Microsoft Office 2007 SP3 or Word 2007 SP3 corrupt memory, potentially allowing code execution or causing a crash. Business risk is mainly where users can open untrusted documents on affected Office 2007 systems. Exposure is likely limited to environments still running Microsoft Office 2007 SP3 or Word 2007 SP3, especially endpoints receiving external Office documents through email, web downloads, or file shares. Treat as high priority only where Office 2007 SP3 or Word 2007 SP3 remains in use. Modernized environments without these versions should document non-exposure and focus on verification. Mitigation focus: Apply Microsoft guidance and updates from MS13-072 where applicable.; Remove or isolate affected Office 2007 or Word 2007 installations if updates are unavailable.; Limit opening of untrusted Office documents on affected systems..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.