Priority CRITICAL 97KEV
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.44099 · Published 2007-02-03 · No fix listed
Priority MEDIUM 60
The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, whi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22886 · Published 2010-07-14 · No fix listed CWE-94
Priority MEDIUM 59
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File For…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20022 · Published 2013-09-11 · No fix listed CWE-119
Priority MEDIUM 59
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20184 · Published 2013-09-11 · No fix listed CWE-119
Priority MEDIUM 59
The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office duri…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.20332 · Published 2010-07-14 · No fix listed CWE-94
Priority MEDIUM 58
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.18682 · Published 2013-09-11 · No fix listed CWE-119
Priority MEDIUM 57
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, E…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.1653 · Published 2015-11-11 · No fix listed CWE-264
Priority MEDIUM 56
Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.30071 · Published 2003-09-04 · No fix listed
Priority MEDIUM 55
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.13358 · Published 2006-10-10 · No fix listed CWE-94
Priority MEDIUM 54
Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll).
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11962 · Published 2008-03-06 · No fix listed
Priority MEDIUM 54
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08417 · Published 2002-03-09 · No fix listed
Priority MEDIUM 53
A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.21335 · Published 2018-07-11 · No fix listed
Priority MEDIUM 52
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerabi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.21377 · Published 2000-07-12 · No fix listed
Priority MEDIUM 51
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05193 · Published 2000-02-04 · No fix listed
Priority MEDIUM 50
Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Acc…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.15967 · Published 2018-03-14 · No fix listed
Priority MEDIUM 50
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.17404 · Published 2008-07-07 · No fix listed
Priority MEDIUM 49
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08821 · Published 2020-04-15 · No fix listed
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00859 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.15959 · Published 2007-12-15 · No fix listed CWE-119
Priority LOW 39
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02678 · Published 2020-08-17 · Fixed in publication, https://aka.ms/OfficeSecurityReleases
Priority LOW 38
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00813 · Published 2025-04-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1000 +2 CWE-125
Priority LOW 38
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00971 · Published 2025-03-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5491.1001 CWE-416
Priority LOW 38
Microsoft Access Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01061 · Published 2025-01-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5487.1000 CWE-122
Load more