Priority LOW 34
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00427 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +3 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00859 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-121
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +3 CWE-122
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-121
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 36
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-121
Priority LOW 36
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1000 CWE-122
Priority LOW 37
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00596 · Published 2025-12-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5530.1000 CWE-23
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00484 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 34
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00653 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 +2 CWE-125
Priority LOW 38
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00813 · Published 2025-04-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5495.1000 +2 CWE-125
Priority LOW 38
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00971 · Published 2025-03-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5491.1001 CWE-416
Priority LOW 38
Microsoft Access Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0119 · Published 2025-01-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5483.1001 CWE-122
Priority LOW 38
Microsoft Access Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01061 · Published 2025-01-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5487.1000 CWE-122
Priority LOW 38
Microsoft Access Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01148 · Published 2025-01-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5483.1001 CWE-416
Priority LOW 38
Microsoft Access Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01096 · Published 2024-12-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5478.1004 CWE-416
Priority LOW 39
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02678 · Published 2020-08-17 · Fixed in publication, https://aka.ms/OfficeSecurityReleases
Priority MEDIUM 49
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08821 · Published 2020-04-15 · No fix listed
Priority MEDIUM 53
A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.21335 · Published 2018-07-11 · No fix listed
Priority MEDIUM 50
Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Acc…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.15967 · Published 2018-03-14 · No fix listed
Priority MEDIUM 57
Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, E…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.1653 · Published 2015-11-11 · No fix listed CWE-264
Priority MEDIUM 58
Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory C…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.18682 · Published 2013-09-11 · No fix listed CWE-119
Load more