Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

38 records

Priority LOW 34

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00427 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1000 +3 CWE-122
Priority MEDIUM 42

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00859 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-121
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2026-09-08 Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-122
Priority LOW 36

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-121
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-121
Priority LOW 36

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00466 Published 2026-08-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 37

Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00596 Published 2025-12-09 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5530.1000 CWE-23
Priority LOW 34

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00484 Published 2025-10-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 34

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00653 Published 2025-10-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 38

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00813 Published 2025-04-08 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1000 +2 CWE-125
Priority LOW 38

Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00971 Published 2025-03-11 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5491.1001 CWE-416
Priority LOW 38

Microsoft Access Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0119 Published 2025-01-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5483.1001 CWE-122
Priority LOW 38

Microsoft Access Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01061 Published 2025-01-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5487.1000 CWE-122
Priority LOW 38

Microsoft Access Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01148 Published 2025-01-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5483.1001 CWE-416
Priority LOW 38

Microsoft Access Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01096 Published 2024-12-10 Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5478.1004 CWE-416
Priority LOW 39

A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02678 Published 2020-08-17 Fixed in publication, https://aka.ms/OfficeSecurityReleases
Priority MEDIUM 50

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Acc…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.15967 Published 2018-03-14 No fix listed
Priority MEDIUM 57

Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, E…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.1653 Published 2015-11-11 No fix listed CWE-264
Priority MEDIUM 58

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.18682 Published 2013-09-11 No fix listed CWE-119
Load more