CIAC, which forms part of the US Department of Energy, warns that the products are configured to send debugging information to Microsoft in the event of a program crash. According to CIAC:
“The debugging information includes a memory dump which may contain all or part of the document being viewed or edited. This debug message potentially could contain sensitive, private information.”
A bulletin from CIAC details registry changes which will disable the automatic sending of debugging information. When prompted by a program with a request to send debug information back to Microsoft, the user then simply clicks “Don’t Send.”