CVE-2015-0097: Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word...

Security readout for executives and security teams

This vulnerability lets a remote attacker run code if a targeted user opens a crafted Office document in affected Microsoft Office 2007 or 2010 applications. The main business risk is compromise through document-based phishing against legacy Office installations. Exposure is most likely where legacy Office 2007 SP3 or Office 2010 SP2 applications remain installed, especially on endpoints that receive external documents. The bundle does not identify newer Office versions as affected. High priority if legacy Office 2007 or 2010 exists in the environment. The risk is user-driven code execution from malicious documents, which can support initial access and endpoint compromise. Mitigation focus: Review and apply Microsoft MS15-022 guidance for affected Office installations.; Inventory endpoints running Office 2007 SP3 or Office 2010 SP2 applications.; Prioritize remediation for users handling external documents or email attachments..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.