ByteOS

Product:Office

Added At:03 Mar, 2022

Due At:24 Mar, 2022

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Used in Ransomware

Unknown

CWE

CWE-94

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2012-1856

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:15 Aug, 2012 | 01:00

Updated At:22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	vendor-advisory x_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	vdb-entry signature x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	third-party-advisory x_refsource_CERT
http://www.securityfocus.com/bid/54948	vdb-entry x_refsource_BID

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/54948

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	vendor-advisory x_refsource_MS x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	vdb-entry signature x_refsource_OVAL x_transferred
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/54948	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/54948

Resource:

vdb-entry

x_refsource_BID

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-noinfo	CWE-noinfo Not enough information

Type: CWE

CWE ID: CWE-noinfo

Description: CWE-noinfo Not enough information

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Timeline

Event	Date
CVE-2012-1856 added to CISA KEV	2022-03-03 00:00:00

Event: CVE-2012-1856 added to CISA KEV

Date: 2022-03-03 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:15 Aug, 2012 | 01:55

Updated At:22 Oct, 2025 | 01:15

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-03-03	2022-03-24	Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Date Added: 2022-03-03

Due Date: 2022-03-24

Vulnerability Name: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:microsoft:commerce_server:2002:sp4:*:*:*:*:*:*

>>commerce_server>>2002

cpe:2.3:a:microsoft:commerce_server:2007:sp2:*:*:*:*:*:*

>>commerce_server>>2007

cpe:2.3:a:microsoft:commerce_server:2009:*:*:*:*:*:*:*

>>commerce_server>>2009

cpe:2.3:a:microsoft:commerce_server:2009:r2:*:*:*:*:*:*

>>commerce_server>>2009

cpe:2.3:a:microsoft:host_integration_server:2004:sp1:*:*:*:*:*:*

>>host_integration_server>>2004

cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*

>>office>>2003

cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

>>office>>2007

cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*

>>office>>2010

cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*

>>office_web_components>>2003

cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*

>>sql_server>>2000

cpe:2.3:a:microsoft:sql_server:2000:sp4:analysis_services:*:*:*:*:*

>>sql_server>>2000

cpe:2.3:a:microsoft:sql_server:2005:sp3:express_advanced_services:*:*:*:*:*

>>sql_server>>2005

cpe:2.3:a:microsoft:sql_server:2005:sp4:*:*:*:*:*:*

>>sql_server>>2005

cpe:2.3:a:microsoft:sql_server:2008:r2_sp1:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:sp2:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:sp3:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*

>>visual_basic>>6.0

cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*

>>visual_foxpro>>8.0

cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*

>>visual_foxpro>>9.0

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/54948	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	secure@microsoft.com	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	secure@microsoft.com	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	secure@microsoft.com	Broken Link
http://www.securityfocus.com/bid/54948	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

Hyperlink: http://www.securityfocus.com/bid/54948

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Source: secure@microsoft.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/54948

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource: N/A

Similar CVEs

4202Records found

CVE-2021-28550

Matching Score-8

Matching Score-8

CVSS Score-9.6||CRITICAL

EPSS-32.05% / 96.70%

7 Day CHG~0.00%

Published-02 Sep, 2021 | 16:07

Updated-23 Oct, 2025 | 14:51

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Microsoft Corporation Adobe Inc.Apple Inc.

Product-windows acrobat_dc acrobat macos acrobat_reader acrobat_reader_dc Acrobat Reader Acrobat and Reader

CWE ID-CWE-416

Use After Free

CVE-2015-8450

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.00% / 90.48%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted filters property value in a TextField object, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2021-28561

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-18.21% / 95.03%

7 Day CHG~0.00%

Published-02 Sep, 2021 | 16:09

Updated-17 Sep, 2024 | 04:29

Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2006-3864

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-45.71% / 97.53%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-07 Aug, 2024 | 18:48

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.

Product-visio office project n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-3730

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-86.76% / 99.41%

7 Day CHG~0.00%

Published-19 Jul, 2006 | 23:00

Updated-13 Jan, 2026 | 04:55

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which leads to an invalid memory copy.

Product-windows_xp internet_explorer ie n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-3438

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-53.93% / 97.93%

7 Day CHG~0.00%

Published-09 Aug, 2006 | 00:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not properly handled when hlink.dll "uses a file containing a malformed function," aka "Hyperlink Object Function Vulnerability."

Product-hyperlink_object_library n/a

CVE-2024-9120

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.23% / 45.09%

7 Day CHG~0.00%

Published-24 Sep, 2024 | 18:44

Updated-02 Jan, 2025 | 16:55

Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Google LLC Microsoft Corporation

Product-chrome windows Chrome chrome

CWE ID-CWE-416

Use After Free

CVE-2021-26625

Matching Score-8

Assigner-KrCERT/CC

Matching Score-8

Assigner-KrCERT/CC

CVSS Score-8.8||HIGH

EPSS-0.21% / 42.45%

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:26

Updated-03 Aug, 2024 | 20:26

tobesoft Nexacro arbitrary file download vulnerability

Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexacro platform. This vulnerability is caused by an automatic update function that does not verify input data except version information. Remote attackers can use this incomplete validation logic to download and execute arbitrary malicious file.

Vendor-tobesoft tobesoft Co.,Ltd Microsoft Corporation

Product-windows nexacro Nexacro 17

CWE ID-CWE-345

Insufficient Verification of Data Authenticity

CVE-2021-27082

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-7.08% / 91.32%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:47

Updated-03 Aug, 2024 | 20:40

Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability

Product-quantum_development_kit Microsoft Quantum Development Kit for Visual Studio Code

CVE-2015-8820

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.56% / 92.21%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8658.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-27081

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-12.49% / 93.75%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:47

Updated-20 Aug, 2025 | 13:05

Visual Studio Code ESLint Extension Remote Code Execution Vulnerability

Product-eslint Microsoft Visual Studio Code ESLint extension

CVE-2007-6255

Matching Score-8

Assigner-CERT/CC

Matching Score-8

Assigner-CERT/CC

CVSS Score-9.3||HIGH

EPSS-57.95% / 98.13%

7 Day CHG~0.00%

Published-23 Apr, 2008 | 10:00

Updated-07 Aug, 2024 | 16:02

Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.

Product-internet_explorer windows_vista windows_xp windows_server_2003 windows_2000 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-3650

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-52.92% / 97.88%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-07 Aug, 2024 | 18:39

Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8636

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-41.99% / 97.33%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8459, CVE-2015-8460, and CVE-2015-8645.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8437

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.00% / 90.48%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the Selection object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted setFocus call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8823

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-0.84% / 74.34%

7 Day CHG~0.00%

Published-22 Apr, 2016 | 18:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted text property, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-windows_8.0 flash_player air chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2006-3876

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-36.54% / 97.02%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 21:00

Updated-07 Aug, 2024 | 18:48

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-3647

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-10.13% / 92.93%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-07 Aug, 2024 | 18:39

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.

Product-office n/a

CWE ID-CWE-189

Not Available

CVE-2015-8653

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.56% / 81.13%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8655, CVE-2015-8821, and CVE-2015-8822.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2021-26608

Matching Score-8

Assigner-KrCERT/CC

Matching Score-8

Assigner-KrCERT/CC

CVSS Score-8.8||HIGH

EPSS-0.23% / 45.81%

7 Day CHG~0.00%

Published-09 Sep, 2021 | 12:54

Updated-03 Aug, 2024 | 20:26

handysoft groupware arbitrary file download and execution vulnerability

An arbitrary file download and execution vulnerability was found in the HShell.dll of handysoft Co., Ltd groupware ActiveX module. This issue is due to missing support for integrity check of download URL or downloaded file hash.

Vendor-handysoft handysoft Microsoft Corporation

Product-windows hshell HShell.dll

CWE ID-CWE-353

Missing Support for Integrity Check

CWE ID-CWE-345

Insufficient Verification of Data Authenticity

CVE-2021-27058

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-9.96% / 92.87%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:48

Updated-03 Aug, 2024 | 20:40

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Product-365_apps Microsoft 365 Apps for Enterprise

CVE-2006-3448

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-62.54% / 98.32%

7 Day CHG~0.00%

Published-13 Feb, 2007 | 20:00

Updated-07 Aug, 2024 | 18:30

Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.

Product-step-by-step_interactive_training n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-3877

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-38.81% / 97.15%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-07 Aug, 2024 | 18:48

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.

Product-publisher visio word_viewer office powerpoint onenote excel_viewer infopath excel word access frontpage outlook project n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-26626

Matching Score-8

Assigner-KrCERT/CC

Matching Score-8

Assigner-KrCERT/CC

CVSS Score-8.1||HIGH

EPSS-0.70% / 71.58%

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:26

Updated-03 Aug, 2024 | 20:26

tobesoft XPLATFORM Arbitrary file execution Vulnerability

Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to be executed. Remote attackers can use this vulnerability to execute arbitrary remote code.

Vendor-tobesoft tobesoft Co.,Ltd Microsoft Corporation

Product-windows xplatform XPLATFORM

CWE ID-CWE-20

Improper Input Validation

CVE-2006-3434

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-25.39% / 96.08%

7 Day CHG~0.00%

Published-10 Oct, 2006 | 22:00

Updated-07 Aug, 2024 | 18:30

Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.

Product-office n/a

CVE-2015-8652

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.24%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, CVE-2015-8658, and CVE-2015-8820.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-8445

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.76% / 89.21%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a large BitmapData source object.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2021-27085

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.62% / 81.47%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:46

Updated-30 Oct, 2025 | 19:55

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Internet Explorer Remote Code Execution Vulnerability

Product-internet_explorer windows_10_1909 windows_10_1809 windows_server_2019 windows_10_2004 windows_10_20h2 windows_10_1803 Internet Explorer 11 Internet Explorer

CVE-2024-7965

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-27.07% / 96.25%

7 Day CHG~0.00%

Published-21 Aug, 2024 | 20:20

Updated-24 Oct, 2025 | 14:06

Known KEV||Action Due Date - 2024-09-18||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Google LLC Microsoft Corporation

Product-chrome edge_chromium Chrome chrome Chromium V8

CWE ID-CWE-358

Improperly Implemented Security Check for Standard

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-26629

Matching Score-8

Assigner-KrCERT/CC

Matching Score-8

Assigner-KrCERT/CC

CVSS Score-8.8||HIGH

EPSS-1.85% / 82.67%

7 Day CHG~0.00%

Published-26 Apr, 2022 | 18:17

Updated-03 Aug, 2024 | 20:26

tobesoft XPLATFORM Path Traversal Vulnerability

A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.

Vendor-tobesoft tobesoft Co.,Ltd Microsoft Corporation

Product-windows xplatform XPLATFORM

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2012-4776

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-45.02% / 97.50%

7 Day CHG~0.00%

Published-14 Nov, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."

Product-windows_8 .net_framework windows_server_2003 windows_vista windows_server_2012 windows_xp windows_7 windows_server_2008 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-27083

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-14.46% / 94.26%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:47

Updated-03 Aug, 2024 | 20:40

Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability

Product-remote_development Visual Studio Code Remote - Containers Extension

CVE-2015-8460

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.71% / 89.12%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-2388

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-40.21% / 97.24%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process.

Product-excel excel_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8657

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-6.68% / 91.03%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-26411

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-92.47% / 99.72%

7 Day CHG~0.00%

Published-11 Mar, 2021 | 15:07

Updated-30 Oct, 2025 | 19:56

Known KEV||Action Due Date - 2021-11-17||Apply updates per vendor instructions.

Internet Explorer Memory Corruption Vulnerability

CWE ID-CWE-416

Use After Free

CVE-2015-8655

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.56% / 81.13%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8821, and CVE-2015-8822.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2006-2492

Matching Score-8

Assigner-CERT/CC

Matching Score-8

Assigner-CERT/CC

CVSS Score-8.8||HIGH

EPSS-83.20% / 99.24%

7 Day CHG-0.37%

Published-20 May, 2006 | 00:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

Product-works_suite office n/a Word

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2015-8654

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.24%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8656, CVE-2015-8657, CVE-2015-8658, and CVE-2015-8820.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2006-3059

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-75.42% / 98.86%

7 Day CHG~0.00%

Published-17 Jun, 2006 | 01:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.

Product-excel excel_viewer n/a

CVE-2006-2383

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-68.97% / 98.59%

7 Day CHG~0.00%

Published-13 Jun, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.

Product-internet_explorer n/a

CVE-2015-8642

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.04% / 89.51%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-2379

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-61.70% / 98.29%

7 Day CHG~0.00%

Published-13 Jun, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.

Product-windows_xp windows_nt windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-26644

Matching Score-8

Assigner-KrCERT/CC

Matching Score-8

Assigner-KrCERT/CC

CVSS Score-8.8||HIGH

EPSS-2.48% / 84.96%

7 Day CHG~0.00%

Published-20 Jan, 2023 | 00:00

Updated-03 Apr, 2025 | 16:59

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.

Vendor-mangboard Hometory Microsoft Corporation

Product-mangboard_wp windows Mangboard WP BASIC

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2006-2389

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-74.23% / 98.80%

7 Day CHG~0.00%

Published-11 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8634

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-49.46% / 97.71%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2007-3924

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-7.82% / 91.79%

7 Day CHG~0.00%

Published-21 Jul, 2007 | 00:00

Updated-17 Sep, 2024 | 00:55

Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in a -chrome argument to the navigatorurl URI, which are inserted into the command line that is created when invoking netscape.exe, a related issue to CVE-2007-3670. NOTE: there has been debate about whether the issue is in Internet Explorer or Netscape. As of 20070713, it is CVE's opinion that IE appears to not properly delimit the URL argument when invoking Netscape; this issue could arise with other protocol handlers in IE.

Vendor-n/a Microsoft Corporation Netscape (Yahoo Inc.)

Product-navigator internet_explorer n/a

CVE-2015-8448

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.00% / 90.48%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted mapBitmap property value, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-2218

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-56.94% / 98.07%

7 Day CHG~0.00%

Published-05 May, 2006 | 10:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via "exceptional conditions" that trigger memory corruption, as demonstrated using an exception handler and nested object tags, a variant of CVE-2006-1992.

Product-windows_xp internet_explorer n/a

CVE-2006-1308

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-42.37% / 97.35%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.