CVE-2015-6091: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Wo...

Security readout for executives and security teams

This is a Microsoft Word remote code execution issue triggered by a crafted Office document. If a user opens a malicious file in an affected Word or Word Viewer version, an attacker may execute code on that user’s system. Exposure is most likely on legacy Windows endpoints or servers that still have the affected Microsoft Office or Word Viewer versions installed and can open Office documents from email, web downloads, or shared storage. Treat this as a legacy Office exposure issue with high business impact if affected software remains deployed. Prioritize identifying and patching or retiring old Office installations, especially where users process external documents. Mitigation focus: Apply the applicable Microsoft MS15-116 security update for affected Office installations.; Remove unsupported or unnecessary Word Viewer installations where possible.; Restrict risky document handling on legacy systems until patched or retired..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.