Live › vulnerability › CVE-2014-1761
Go to dashboardMicrosoft Word has a memory corruption bug that can be triggered by a crafted document. An attacker who gets a user to open it can run code on that machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Word | vendor | – | – |
Unknown from the sources.
Apply the Microsoft updates for Word per vendor instructions, as CISA requires; the sources do not name the patched build.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014.
This page as .md · .json · in your agent: get_signal("CVE-2014-1761")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.