CVE-2010-3148: Microsoft Visio

High severity, CVSS 9.3. EPSS: 13.6% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."

Affected products

• Microsoft Visio: version 2003 only

Published 2010-08-27. Last modified 2026-06-16.