Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

54 records in Visio · all components

Priority CRITICAL 97KEV

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44099 Published 2007-02-03 No fix listed
Priority HIGH 72

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.52065 Published 2008-09-10 No fix listed CWE-399
Priority HIGH 71

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.49024 Published 2004-09-17 No fix listed
Priority HIGH 70

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-20…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.67309 Published 2010-05-05 No fix listed CWE-119
Priority HIGH 68

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM obj…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.63246 Published 2005-08-19 No fix listed CWE-119
Priority HIGH 65

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .D…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.33848 Published 2006-10-10 No fix listed CWE-94
Priority MEDIUM 64

gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31037 Published 2008-09-10 No fix listed CWE-119
Priority MEDIUM 64

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerabil…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32106 Published 2008-04-08 No fix listed CWE-399
Priority MEDIUM 64

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Vis…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32106 Published 2008-04-08 No fix listed CWE-94
Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
Priority MEDIUM 60

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vul…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.22201 Published 2011-08-10 No fix listed CWE-20
Load more
Open these records in search →