CVE-2003-0821: Microsoft Word

High severity, CVSS 7.5. EPSS: 19.4% chance of exploitation in the next 30 days.

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.

Affected products

• Microsoft Word: version 97 only; version 98 only; version 2000 only; version 2002 only
• Microsoft Works: version 2001 only; version 2002 only; version 2003 only; version 2004 only

Published 2003-12-15. Last modified 2026-06-16.