Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Visual Basic · all components

Priority CRITICAL 97KEV

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Se…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.72032 Published 2012-08-15 No fix listed
Priority CRITICAL 97KEV

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components S…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.99976 Published 2012-04-10 No fix listed CWE-94
Priority HIGH 72

Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.53703 Published 2008-12-10 No fix listed CWE-119
Priority HIGH 71

Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.48964 Published 2007-09-10 No fix listed CWE-119
Priority HIGH 71

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.49024 Published 2004-09-17 No fix listed
Priority HIGH 65

Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the s…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.34534 Published 2007-08-14 No fix listed CWE-119
Priority MEDIUM 57

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via craf…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.2206 Published 2008-12-10 No fix listed CWE-189
Priority MEDIUM 56

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized o…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 56

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly i…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 56

The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-264
Priority MEDIUM 53

Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06794 Published 2006-09-13 No fix listed
Open these records in search →