ByteOS

Product:Office

Added At:14 Apr, 2026

Due At:28 Apr, 2026

Microsoft Office Remote Code Execution

Used in Ransomware

Unknown

CWE

CWE-94

Required Action:

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes:

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0238

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:25 Feb, 2009 | 16:00

Updated At:15 Apr, 2026 | 03:58

▼CVE Numbering Authority (CNA)

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1; and Excel in Microsoft Office 2004 and 2008 for Mac allow remote attackers to execute arbitrary code via a crafted Excel document that triggers an access attempt on an invalid object, as exploited in the wild in February 2009 by Trojan.Mdropper.AC.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.microsoft.com/technet/security/advisory/968272.mspx	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2009/1023	vdb-entry x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/48875	vdb-entry x_refsource_XF
http://www.us-cert.gov/cas/techalerts/TA09-104A.html	third-party-advisory x_refsource_CERT
http://www.securityfocus.com/bid/33870	vdb-entry x_refsource_BID
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99	x_refsource_MISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009	vendor-advisory x_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968	vdb-entry signature x_refsource_OVAL
http://isc.sans.org/diary.html?storyid=5923	x_refsource_MISC
http://securitytracker.com/id?1021744	vdb-entry x_refsource_SECTRACK
http://blogs.zdnet.com/security/?p=2658	x_refsource_MISC

Hyperlink: http://www.microsoft.com/technet/security/advisory/968272.mspx

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2009/1023

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/48875

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-104A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/33870

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99

Resource:

x_refsource_MISC

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://isc.sans.org/diary.html?storyid=5923

Resource:

x_refsource_MISC

Hyperlink: http://securitytracker.com/id?1021744

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://blogs.zdnet.com/security/?p=2658

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.microsoft.com/technet/security/advisory/968272.mspx	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2009/1023	vdb-entry x_refsource_VUPEN x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/48875	vdb-entry x_refsource_XF x_transferred
http://www.us-cert.gov/cas/techalerts/TA09-104A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/33870	vdb-entry x_refsource_BID x_transferred
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99	x_refsource_MISC x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009	vendor-advisory x_refsource_MS x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968	vdb-entry signature x_refsource_OVAL x_transferred
http://isc.sans.org/diary.html?storyid=5923	x_refsource_MISC x_transferred
http://securitytracker.com/id?1021744	vdb-entry x_refsource_SECTRACK x_transferred
http://blogs.zdnet.com/security/?p=2658	x_refsource_MISC x_transferred

Hyperlink: http://www.microsoft.com/technet/security/advisory/968272.mspx

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1023

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/48875

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-104A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/33870

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://isc.sans.org/diary.html?storyid=5923

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://securitytracker.com/id?1021744

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://blogs.zdnet.com/security/?p=2658

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94 Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94 Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2026-04-14

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238

Timeline

Event	Date
CVE-2009-0238 added to CISA KEV	2026-04-14 00:00:00

Event: CVE-2009-0238 added to CISA KEV

Date: 2026-04-14 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:25 Feb, 2009 | 16:30

Updated At:22 Apr, 2026 | 16:42

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2026-04-14	2026-04-28	Microsoft Office Remote Code Execution	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Date Added: 2026-04-14

Due Date: 2026-04-28

Vulnerability Name: Microsoft Office Remote Code Execution

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*

>>excel>>2000

cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*

>>excel>>2002

cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*

>>excel>>2003

cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*

>>excel>>2007

cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*

>>excel_viewer>>*

cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*

>>office>>2004

cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*

>>office>>2008

cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*

>>office_compatibility_pack>>2007

cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*

>>office_excel_viewer>>*

cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*

>>office_excel_viewer>>2003

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov
CWE-94	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-94

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://blogs.zdnet.com/security/?p=2658	secure@microsoft.com	Broken Link
http://isc.sans.org/diary.html?storyid=5923	secure@microsoft.com	Press/Media Coverage
http://securitytracker.com/id?1021744	secure@microsoft.com	Broken Link
http://www.microsoft.com/technet/security/advisory/968272.mspx	secure@microsoft.com	Vendor Advisory
http://www.securityfocus.com/bid/33870	secure@microsoft.com	Broken Link
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99	secure@microsoft.com	Broken Link
http://www.us-cert.gov/cas/techalerts/TA09-104A.html	secure@microsoft.com	US Government Resource
http://www.vupen.com/english/advisories/2009/1023	secure@microsoft.com	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009	secure@microsoft.com	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48875	secure@microsoft.com	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968	secure@microsoft.com	Broken Link
http://blogs.zdnet.com/security/?p=2658	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://isc.sans.org/diary.html?storyid=5923	af854a3a-2127-422b-91ae-364da2661108	Press/Media Coverage
http://securitytracker.com/id?1021744	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.microsoft.com/technet/security/advisory/968272.mspx	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/33870	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.us-cert.gov/cas/techalerts/TA09-104A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2009/1023	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/48875	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: http://blogs.zdnet.com/security/?p=2658

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://isc.sans.org/diary.html?storyid=5923

Source: secure@microsoft.com

Resource:

Press/Media Coverage

Hyperlink: http://securitytracker.com/id?1021744

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.microsoft.com/technet/security/advisory/968272.mspx

Source: secure@microsoft.com

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/33870

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-104A.html

Source: secure@microsoft.com

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/1023

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009

Source: secure@microsoft.com

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/48875

Source: secure@microsoft.com

Resource:

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://blogs.zdnet.com/security/?p=2658

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://isc.sans.org/diary.html?storyid=5923

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Press/Media Coverage

Hyperlink: http://securitytracker.com/id?1021744

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.microsoft.com/technet/security/advisory/968272.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/33870

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-104A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/1023

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/48875

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5968

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0238

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

4980Records found

CVE-2013-0007

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-24.21% / 96.21%

7 Day CHG~0.00%

Published-09 Jan, 2013 | 18:00

Updated-29 Apr, 2026 | 01:13

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

Product-windows_rt word_viewer windows_7 windows_server_2008 xml_core_services expression_web windows_vista windows_xp office_compatibility_pack windows_8 office groove_server sharepoint_server windows_server_2012 windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-4774

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-56.77% / 98.18%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow remote attackers to execute arbitrary code via a crafted (1) file name or (2) subfolder name that triggers use of unallocated memory as the destination of a copy operation, aka "Windows Filename Parsing Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-4781

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.41% / 97.86%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1877

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.97% / 98.02%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Title Element Change Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1881

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.97% / 98.02%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnRowsInserted Event Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2522

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-51.86% / 97.97%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka "Virtual Function Table Corruption Remote Code Execution Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2556

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.52% / 97.87%

7 Day CHG~0.00%

Published-12 Dec, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to execute arbitrary code via a crafted OpenType font file, aka "OpenType Font Parsing Vulnerability."

Product-windows_rt windows_7 windows_server_2008 windows_vista windows_xp windows_8 windows_2003_server windows_server_2012 windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2521

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-54.93% / 98.10%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-2526

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-57.53% / 98.21%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."

Product-windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1875

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-82.18% / 99.24%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1879

Matching Score-10

Matching Score-10

CVSS Score-8.1||HIGH

EPSS-27.68% / 96.57%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by attempting to access an undefined memory location, aka "insertAdjacentText Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a internet_explorer

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1874

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.97% / 98.02%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object, aka "Developer Toolbar Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1880

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.97% / 98.02%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "insertRow Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1855

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.26% / 97.90%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp .net_framework windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1523

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-52.97% / 98.02%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Center Element Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1522

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-54.93% / 98.10%

7 Day CHG~0.00%

Published-10 Jul, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Cached Object Remote Code Execution Vulnerability."

Product-internet_explorer windows_vista windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-1535

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-91.61% / 99.69%

7 Day CHG~0.00%

Published-15 Aug, 2012 | 10:00

Updated-22 Apr, 2026 | 10:36

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.

Vendor-n/a SUSE Red Hat, Inc.Adobe Inc.Linux Kernel Organization, Inc openSUSE Microsoft Corporation Apple Inc.

Product-linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows flash_player linux_kernel opensuse n/a Flash Player

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0173

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.28% / 97.99%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted, aka "Remote Desktop Protocol Vulnerability," a different vulnerability than CVE-2012-0002.

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0175

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-46.76% / 97.75%

7 Day CHG~0.00%

Published-10 Jul, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0158

Matching Score-10

Matching Score-10

CVSS Score-8.8||HIGH

EPSS-94.31% / 99.95%

7 Day CHG+0.02%

Published-10 Apr, 2012 | 21:00

Updated-22 Apr, 2026 | 10:36

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

Product-sql_server_2008 sql_server_2005 visual_foxpro sql_server_2000 commerce_server commerce_server_2009 office biztalk_server visual_basic office_web_components n/a MSCOMCTL.OCX

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0182

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-50.33% / 97.91%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."

Product-word n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0171

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-53.20% / 98.04%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0169

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.45% / 97.87%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."

Product-internet_explorer windows_vista windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0020

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.69%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0136

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.69%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0011

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-42.33% / 97.55%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0137

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.69%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0019

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.69%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0014

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-52.27% / 97.99%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Vendor-n/a Microsoft Corporation Apple Inc.

Product-windows_7 mac_os_x windows_server_2008 windows_vista .net_framework windows_xp silverlight windows windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0172

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-55.71% / 98.13%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0138

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.69%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0155

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-56.96% / 98.19%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."

Product-internet_explorer windows_vista windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3411

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-55.71% / 98.13%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."

Product-publisher n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3403

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-39.36% / 97.40%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka "Record Memory Corruption Vulnerability."

Product-office excel n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3412

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-55.71% / 98.13%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."

Product-publisher n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3397

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-22.87% / 96.03%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

The Microsoft Time component in DATIME.DLL in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted web site that leverages an unspecified "binary behavior" in Internet Explorer, aka "Microsoft Time Remote Code Execution Vulnerability."

Product-windows_server_2003 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3401

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-38.84% / 97.37%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."

Product-windows_vista windows_7 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-42298

Matching Score-10

Matching Score-10

CVSS Score-7.8||HIGH

EPSS-2.27% / 85.07%

7 Day CHG~0.00%

Published-10 Nov, 2021 | 00:47

Updated-04 Aug, 2024 | 03:30

Microsoft Defender Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-malware_protection_engine Microsoft Malware Protection Engine

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-3413

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-52.41% / 98.00%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability."

Product-office_compatibility_pack powerpoint office powerpoint_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-1508

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-27.09% / 96.51%

7 Day CHG~0.00%

Published-14 Dec, 2011 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."

Product-publisher n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-2101

Matching Score-10

Assigner-Adobe Systems Incorporated

Matching Score-10

Assigner-Adobe Systems Incorporated

CVSS Score-9.3||HIGH

EPSS-14.53% / 94.63%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."

Vendor-n/a Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x windows n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-1969

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-12.91% / 94.24%

7 Day CHG~0.00%

Published-12 Oct, 2011 | 01:00

Updated-29 Apr, 2026 | 01:13

Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution Vulnerability."

Product-forefront_unified_access_gateway n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-4588

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-65.64% / 98.53%

7 Day CHG~0.00%

Published-23 Dec, 2010 | 17:00

Updated-29 Apr, 2026 | 01:13

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Product-wmi_administrative_tools n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-0093

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-44.03% / 97.63%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-29 Apr, 2026 | 01:13

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."

Product-visio n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-0035

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-49.30% / 97.86%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2010-2556 and CVE-2011-0036.

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-0092

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-44.59% / 97.66%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-29 Apr, 2026 | 01:13

The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."

Product-visio n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-0028

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-54.90% / 98.10%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-29 Apr, 2026 | 01:13

WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."

Product-windows_server_2003 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3331

Matching Score-10

Matching Score-10

CVSS Score-9.3||HIGH

EPSS-55.40% / 98.12%

7 Day CHG~0.00%

Published-13 Oct, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3819

Matching Score-10

Assigner-Apple Inc.

Matching Score-10

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.58% / 85.93%

7 Day CHG~0.00%

Published-20 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, does not properly perform a cast of an unspecified variable during processing of Cascading Style Sheets (CSS) boxes, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.

Vendor-n/a Microsoft Corporation Apple Inc.

Product-webkit windows_7 mac_os_x windows_vista windows_xp safari mac_os_x_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2010-3809

Matching Score-10

Assigner-Apple Inc.