Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

27 records in Visual Studio .net · all components

Priority HIGH 72

Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.53703 Published 2008-12-10 No fix listed CWE-119
Priority HIGH 71

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.49024 Published 2004-09-17 No fix listed
Priority HIGH 68

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM obj…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.63246 Published 2005-08-19 No fix listed CWE-119
Priority HIGH 66

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vist…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.36608 Published 2009-07-29 No fix listed CWE-457
Priority HIGH 66

Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) a…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.54027 Published 2006-11-28 No fix listed CWE-119
Priority MEDIUM 63

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28734 Published 2008-03-11 No fix listed CWE-94
Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
Priority MEDIUM 61

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, W…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.32378 Published 2013-07-10 No fix listed CWE-94
Priority MEDIUM 60

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restricti…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.45595 Published 2006-11-01 No fix listed
Priority MEDIUM 59

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20452 Published 2009-10-14 No fix listed CWE-94
Priority MEDIUM 59

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20982 Published 2009-10-14 No fix listed CWE-189
Priority MEDIUM 57

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via craf…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.2206 Published 2008-12-10 No fix listed CWE-189
Priority MEDIUM 56

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized o…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 56

The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3 does not properly handle errors during access to incorrectly i…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 56

The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.20976 Published 2008-12-10 No fix listed CWE-264
Priority MEDIUM 54

The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.343 Published 2009-07-29 No fix listed CWE-126
Load more
Open these records in search →