Skip to main content

Vendor/product archive

microsoft / access CVEs

Beta · best-effort

28 CVEs tagged to microsoft / access10 Critical, 17 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2018-8312

Published Jul 11, 2018

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This aff…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2018-0903

Published Mar 14, 2018

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2015-2503

Published Nov 11, 2015

Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 20…

CVSS 9.3 · Critical

CVE-2013-3157

Published Sep 11, 2013

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2013-3156

Published Sep 11, 2013

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2013-3155

Published Sep 11, 2013

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2010-1881

Published Jul 15, 2010

The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2010-0814

Published Jul 15, 2010

The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by In…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2008-1200

Published Mar 6, 2008

Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll)…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2007-6357

Published Dec 15, 2007

Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file. NOTE:…

CVSS 5.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2007-0671

Published Feb 3, 2007

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code…

CVSS 8.8 · High
evidence mentions
3
Buzz score
46.9
KEV listed

CVE-2006-3877

Published Oct 10, 2006

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute a…

CVSS 9.3 · Critical
evidence mentions
1
Buzz score
11.9

CVE-2003-0665

Published Oct 20, 2003

Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-25 of 28 CVEsPage 1 of 2