CVE-2001-0240
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning...
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
- Record
CVE-2001-0240- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
- Record
CVE-2001-0240- Updated
- 2026-11-02
EUVDEUVD-2001-0240 No score
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
- Record
EUVD-2001-0240- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qc4q-94jc-f26r No score
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning...
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
- Record
GHSA-qc4q-94jc-f26r- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0240 is a medium vulnerability (CVSS 4.6) in Microsoft Word, published June 27, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. No source names a fixed version.