Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Data Access Components · all components

Priority HIGH 73

Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.54372 Published 2011-01-12 No fix listed CWE-20
Priority HIGH 72

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers acc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29406 Published 2012-07-10 No fix listed CWE-908
Priority HIGH 69

The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not pr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.43619 Published 2006-10-27 No fix listed CWE-20
Priority HIGH 65

Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execu…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.34399 Published 2011-01-12 No fix listed CWE-189
Open these records in search →