CVE-2001-0628: Microsoft Word

High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days.

Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.

Affected products

• Microsoft Word: version 2000 only

Published 2001-08-14. Last modified 2026-06-16.