CVE-2010-1900

CVE-2010-1900 is a critical vulnerability affecting multiple Microsoft Office products, including Word 2002, 2003, and 2007, as well as Office for Mac and related viewers/converters. It stems from improper handling of malformed records within Word files. This flaw allows remote attackers to achieve arbitrary code execution or cause a denial of service through memory corruption simply by tricking a user into opening a specially crafted document. With a CVSS score of 9.3, it is considered highly severe, requiring medium attack complexity but leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for a buffer overflow related to this vulnerability has been publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.