CVE-2010-3954: Microsoft Publisher

High severity, CVSS 9.3. EPSS: 20.8% chance of exploitation in the next 30 days.

Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."

Affected products

• Microsoft Publisher: version 2002 only; version 2003 only; version 2010 only

Published 2010-12-16. Last modified 2026-06-16.