CVE-2013-1322: Microsoft Publisher

High severity, CVSS 10.0. EPSS: 25.3% chance of exploitation in the next 30 days.

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Affected products

Published 2013-05-15. Last modified 2026-06-16.