CVE-2001-0240: Microsoft Word

Medium severity, CVSS 4.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.

Affected products

• Microsoft Word: version 97 only; version 98 only; version 2000 only; version 2001 only

Published 2001-06-27. Last modified 2026-06-16.