Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

38 records in Access · all components

Priority CRITICAL 97KEV

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44099 Published 2007-02-03 No fix listed
Priority MEDIUM 59

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File For…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20022 Published 2013-09-11 No fix listed CWE-119
Priority MEDIUM 59

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20184 Published 2013-09-11 No fix listed CWE-119
Priority MEDIUM 58

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.18682 Published 2013-09-11 No fix listed CWE-119
Priority MEDIUM 57

Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, E…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.1653 Published 2015-11-11 No fix listed CWE-264
Priority MEDIUM 50

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Acc…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.15967 Published 2018-03-14 No fix listed
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-121
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-122
Priority LOW 39

A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02678 Published 2020-08-17 Fixed in publication, https://aka.ms/OfficeSecurityReleases
Priority LOW 38

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00813 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1000 +2 CWE-125
Priority LOW 38

Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00971 Published 2025-03-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5491.1001 CWE-416
Priority LOW 38

Microsoft Access Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01061 Published 2025-01-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5487.1000 CWE-122
Load more
Open these records in search →