CVE-2001-0501: Microsoft Word

Medium severity, CVSS 4.6. EPSS: 1.7% chance of exploitation in the next 30 days.

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.

Affected products

• Microsoft Word: up to and including 2002; version 97 only; version 98 only; version 2000 only; version 2001 only

Published 2001-07-21. Last modified 2026-06-16.