CVE-2010-1254

no score yetEPSS 1.4%

The installation for Microsoft Open XML File Format Converter for Mac sets insecure ACLs for the /Applications folder, which allows local users to execute arbitrary code by replacing the executable with a Trojan Horse, aka "Mac Office Open XML Permissions Vulnerability."

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2010-06-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:open_xml_file_format_converter

References

http://www.securityfocus.com/bid/40533
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-038
http://www.securityfocus.com/bid/40533
http://www.us-cert.gov/cas/techalerts/TA10-159B.html

Check your stack JSON