Access
by Microsoft
CVEs (40)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2007-0671 | Hig | 0.73 | 8.8 | 0.42 | KEV | Feb 3, 2007 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks. | |
| CVE-2020-0760 | Hig | 0.58 | 8.8 | 0.09 | Apr 15, 2020 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991. | ||
| CVE-2021-28455 | Hig | 0.57 | 8.8 | 0.02 | May 11, 2021 | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability | ||
| CVE-2018-8312 | Hig | 0.52 | 7.8 | 0.20 | Jul 11, 2018 | A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office. | ||
| CVE-2018-0903 | Hig | 0.52 | 7.8 | 0.16 | Mar 14, 2018 | Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability". | ||
| CVE-2026-64920 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-64919 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-64914 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-64912 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-64908 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-64906 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-62552 | Hig | 0.51 | 7.8 | 0.01 | Dec 9, 2025 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-26642 | Hig | 0.51 | 7.8 | 0.01 | Apr 8, 2025 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-26630 | Hig | 0.51 | 7.8 | 0.01 | Mar 11, 2025 | Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-21395 | Hig | 0.51 | 7.8 | 0.01 | Jan 14, 2025 | Microsoft Access Remote Code Execution Vulnerability | ||
| CVE-2025-21366 | Hig | 0.51 | 7.8 | 0.01 | Jan 14, 2025 | Microsoft Access Remote Code Execution Vulnerability | ||
| CVE-2025-21186 | Hig | 0.51 | 7.8 | 0.01 | Jan 14, 2025 | Microsoft Access Remote Code Execution Vulnerability | ||
| CVE-2024-49142 | Hig | 0.51 | 7.8 | 0.01 | Dec 12, 2024 | Microsoft Access Remote Code Execution Vulnerability | ||
| CVE-2020-1582 | Hig | 0.51 | 7.8 | 0.03 | Aug 17, 2020 | A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | ||
| CVE-2025-59235 | Hig | 0.46 | 7.1 | 0.01 | Oct 14, 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
- risk 0.73cvss 8.8epss 0.42
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
- risk 0.58cvss 8.8epss 0.09
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
- risk 0.57cvss 8.8epss 0.02
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
- risk 0.52cvss 7.8epss 0.20
A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.
- risk 0.52cvss 7.8epss 0.16
Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability".
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.01
Microsoft Access Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Access Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Access Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Access Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- risk 0.46cvss 7.1epss 0.01
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Page 1 of 2