CVE-2013-3858: Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps...

Security readout for executives and security teams

This vulnerability lets a crafted Office document crash affected Microsoft Word components or potentially run attacker-controlled code. Business risk is highest where users open untrusted documents or SharePoint/Office Web Apps process uploaded Word files. The provided sources do not show active exploitation. Exposure is likely in legacy Microsoft Office or SharePoint 2010 environments that still process Word documents. Modern environments are exposed only if these named legacy components remain installed, unsupported, or missing Microsoft security updates referenced by MS13-067 and MS13-072. Prioritize remediation for any remaining legacy Microsoft Office or SharePoint 2010 systems, especially server-side document processing. The impact can include code execution, but urgency is moderated by the lack of source evidence for active exploitation. Mitigation focus: Review Microsoft MS13-067 and MS13-072 guidance for the named products.; Apply the relevant Microsoft security updates where affected products remain in use.; Retire or isolate unsupported Office, Word Viewer, and SharePoint 2010 components..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.