ByteOS

Product:Office

Added At:03 Mar, 2022

Due At:24 Mar, 2022

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Used in Ransomware

Unknown

CWE

CWE-94

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2012-1856

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:15 Aug, 2012 | 01:00

Updated At:22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	vendor-advisory x_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	vdb-entry signature x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	third-party-advisory x_refsource_CERT
http://www.securityfocus.com/bid/54948	vdb-entry x_refsource_BID

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: http://www.securityfocus.com/bid/54948

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	vendor-advisory x_refsource_MS x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	vdb-entry signature x_refsource_OVAL x_transferred
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	third-party-advisory x_refsource_CERT x_transferred
http://www.securityfocus.com/bid/54948	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/54948

Resource:

vdb-entry

x_refsource_BID

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-noinfo	CWE-noinfo Not enough information

Type: CWE

CWE ID: CWE-noinfo

Description: CWE-noinfo Not enough information

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Timeline

Event	Date
CVE-2012-1856 added to CISA KEV	2022-03-03 00:00:00

Event: CVE-2012-1856 added to CISA KEV

Date: 2022-03-03 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Resource:

government-resource

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:15 Aug, 2012 | 01:55

Updated At:22 Oct, 2025 | 01:15

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-03-03	2022-03-24	Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Date Added: 2022-03-03

Due Date: 2022-03-24

Vulnerability Name: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:microsoft:commerce_server:2002:sp4:*:*:*:*:*:*

>>commerce_server>>2002

cpe:2.3:a:microsoft:commerce_server:2007:sp2:*:*:*:*:*:*

>>commerce_server>>2007

cpe:2.3:a:microsoft:commerce_server:2009:*:*:*:*:*:*:*

>>commerce_server>>2009

cpe:2.3:a:microsoft:commerce_server:2009:r2:*:*:*:*:*:*

>>commerce_server>>2009

cpe:2.3:a:microsoft:host_integration_server:2004:sp1:*:*:*:*:*:*

>>host_integration_server>>2004

cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*

>>office>>2003

cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*

>>office>>2007

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

>>office>>2007

cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*

>>office>>2010

cpe:2.3:a:microsoft:office_web_components:2003:sp3:*:*:*:*:*:*

>>office_web_components>>2003

cpe:2.3:a:microsoft:sql_server:2000:sp4:*:*:*:*:*:*

>>sql_server>>2000

cpe:2.3:a:microsoft:sql_server:2000:sp4:analysis_services:*:*:*:*:*

>>sql_server>>2000

cpe:2.3:a:microsoft:sql_server:2005:sp3:express_advanced_services:*:*:*:*:*

>>sql_server>>2005

cpe:2.3:a:microsoft:sql_server:2005:sp4:*:*:*:*:*:*

>>sql_server>>2005

cpe:2.3:a:microsoft:sql_server:2008:r2_sp1:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:sp2:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:sql_server:2008:sp3:*:*:*:*:*:*

>>sql_server>>2008

cpe:2.3:a:microsoft:visual_basic:6.0:*:*:*:*:*:*:*

>>visual_basic>>6.0

cpe:2.3:a:microsoft:visual_foxpro:8.0:sp1:*:*:*:*:*:*

>>visual_foxpro>>8.0

cpe:2.3:a:microsoft:visual_foxpro:9.0:sp2:*:*:*:*:*:*

>>visual_foxpro>>9.0

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/54948	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	secure@microsoft.com	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	secure@microsoft.com	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	secure@microsoft.com	Broken Link
http://www.securityfocus.com/bid/54948	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA12-227A.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447	af854a3a-2127-422b-91ae-364da2661108	Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

Hyperlink: http://www.securityfocus.com/bid/54948

Source: secure@microsoft.com

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Source: secure@microsoft.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Source: secure@microsoft.com

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/54948

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Third Party Advisory

VDB Entry

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA12-227A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-060

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15447

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Broken Link

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1856

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource: N/A

Similar CVEs

4202Records found

CVE-2006-1540

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-74.66% / 98.82%

7 Day CHG~0.00%

Published-30 Mar, 2006 | 11:00

Updated-03 Apr, 2025 | 01:03

MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which triggers an access violation in excel.exe; (3) a Word document, which triggers an access violation in mso.dll in winword.exe; and (4) a PowerPoint document, which triggers an access violation in powerpnt.txt. NOTE: after the initial disclosure, this issue was demonstrated by triggering an integer overflow using an inconsistent size for a Unicode "Sheet Name" string.

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8648

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.93%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-1306

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-42.37% / 97.35%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."

Product-excel excel_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-1301

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-37.94% / 97.10%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.

Product-excel excel_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-1304

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-43.61% / 97.42%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation."

Product-excel excel_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-1359

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-87.60% / 99.45%

7 Day CHG~0.00%

Published-23 Mar, 2006 | 00:00

Updated-03 Apr, 2025 | 01:03

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.

Product-internet_explorer ie n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2006-1302

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-40.13% / 97.23%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."

Product-excel excel_viewer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8639

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.93%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-1316

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-40.18% / 97.24%

7 Day CHG~0.00%

Published-11 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389.

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8438

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.14% / 91.35%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted XML object that is mishandled during a toString call, a different vulnerability than CVE-2015-8446.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-1311

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-70.64% / 98.66%

7 Day CHG~0.00%

Published-13 Feb, 2007 | 20:00

Updated-07 Aug, 2024 | 17:03

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.

Product-office windows_2003_server windows_xp learning_essentials windows_2000 n/a

CVE-2006-1318

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-18.94% / 95.16%

7 Day CHG~0.00%

Published-19 Sep, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lengths, which allows remote attackers to execute arbitrary code via a malformed control in an Office document, aka "Microsoft Office Control Vulnerability."

Product-office n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2022-28237

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-3.45% / 87.23%

7 Day CHG~0.00%

Published-11 May, 2022 | 17:33

Updated-17 Sep, 2024 | 01:21

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability in the processing of annotations that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-acrobat_dc acrobat_reader acrobat acrobat_reader_dc windows macos Acrobat Reader

CWE ID-CWE-416

Use After Free

CVE-2006-5581

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-66.19% / 98.48%

7 Day CHG~0.00%

Published-12 Dec, 2006 | 20:00

Updated-07 Aug, 2024 | 19:55

Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."

Product-internet_explorer n/a

CVE-2015-8645

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-7.03% / 91.28%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8459, CVE-2015-8460, and CVE-2015-8636.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8635

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-49.46% / 97.71%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-1309

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-37.94% / 97.10%

7 Day CHG~0.00%

Published-13 Jul, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.

Product-excel excel_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-8650

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.93%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8442

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.00% / 90.48%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted filters property value, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8643

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.04% / 89.51%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8647

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.93%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8644

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-49.46% / 97.71%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8822

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-0.87% / 74.78%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, and CVE-2015-8821.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2015-8638

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.30% / 86.93%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8656

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-6.68% / 91.03%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8657, CVE-2015-8658, and CVE-2015-8820.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2007-0942

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-55.28% / 98.00%

7 Day CHG~0.00%

Published-08 May, 2007 | 23:00

Updated-07 Aug, 2024 | 12:34

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.

Product-internet_explorer windows_vista windows_2003_server windows_xp ie windows_2000 n/a

CVE-2015-8446

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.14% / 91.35%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via an MP3 file with COMM tags that are mishandled during memory allocation, a different vulnerability than CVE-2015-8438.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8821

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.56% / 81.13%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-416

Use After Free

CVE-2015-8641

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.04% / 89.51%

7 Day CHG~0.00%

Published-28 Dec, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, and CVE-2015-8650.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8449

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.00% / 90.48%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted lineTo method call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2006-0020

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-30.34% / 96.56%

7 Day CHG~0.00%

Published-10 Jan, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."

Product-windows_98se windows_xp windows_2000 windows_98 windows_me windows_2003_server n/a

CVE-2006-0010

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-49.82% / 97.73%

7 Day CHG~0.00%

Published-10 Jan, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.

Product-windows_me windows_98se windows_nt windows_xp windows_98 windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0006

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-73.90% / 98.78%

7 Day CHG~0.00%

Published-14 Feb, 2006 | 22:00

Updated-03 Apr, 2025 | 01:03

Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media Player 10 on XP SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted bitmap (.BMP) file that specifies a size of 0 but contains additional data.

Product-windows_98se windows_media_player windows_xp windows_2000 windows_98 windows_me windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0007

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-59.66% / 98.20%

7 Day CHG~0.00%

Published-11 Jul, 2006 | 21:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.

Product-office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8658

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-6.68% / 91.03%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8820.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-24091

Matching Score-8

Matching Score-8

Product-windows_server_2016 windows_server_2019 windows_10 Windows 10 Version 2004 Windows 10 Version 1507 Windows 10 Version 1607 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows Server 2016 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows Server, version 1909 (Server Core installation)Windows Server 2019 Windows Server version 20H2 Windows 10 Version 1909 Windows 10 Version 20H2

CVSS Score-7.8||HIGH

EPSS-15.50% / 94.49%

7 Day CHG~0.00%

Published-25 Feb, 2021 | 23:01

Updated-03 Aug, 2024 | 19:21

Windows Camera Codec Pack Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2006-0005

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-75.52% / 98.86%

7 Day CHG~0.00%

Published-14 Feb, 2006 | 19:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML with an EMBED element containing a long src attribute.

Product-windows_server_2003 windows_2000_advanced_server windows_xp windows_server_2000 windows-nt windows_2000 windows_2003_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2006-0001

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-73.18% / 98.75%

7 Day CHG~0.00%

Published-12 Sep, 2006 | 23:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.

Product-office publisher n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7658

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.33%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted actionInstanceOf arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-7629

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-19.89% / 95.31%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a TextFormat object with a crafted tabStops property, a different vulnerability than CVE-2015-7631, CVE-2015-7643, and CVE-2015-7644.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CVE-2015-7661

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.83% / 90.33%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via a crafted getBounds call, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2015-8049

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.20%

7 Day CHG~0.00%

Published-10 Dec, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted autoSize property value, a different vulnerability than CVE-2015-8048, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows iphone_os mac_os_x android n/a

CVE-2021-24093

Matching Score-8

Matching Score-8

Product-windows_server_2016 windows_server_2019 windows_10 Windows 10 Version 2004 Windows 10 Version 1607 Windows Server version 2004 Windows 10 Version 1803 Windows Server 2019 (Server Core installation)Windows Server 2016 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows Server, version 1909 (Server Core installation)Windows Server 2019 Windows Server version 20H2 Windows 10 Version 1909 Windows 10 Version 20H2

CVSS Score-8.8||HIGH

EPSS-28.46% / 96.40%

7 Day CHG~0.00%

Published-25 Feb, 2021 | 23:01

Updated-03 Aug, 2024 | 19:21

Windows Graphics Component Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

CVE-2015-7632

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-6.99% / 91.25%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 on Linux, Adobe AIR before 19.0.0.213, Adobe AIR SDK before 19.0.0.213, and Adobe AIR SDK & Compiler before 19.0.0.213 allows attackers to execute arbitrary code via a Loader object with a crafted loaderBytes property.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk air_sdk_\&_compiler windows mac_os_x android n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-25000

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.82% / 82.54%

7 Day CHG~0.00%

Published-03 Apr, 2025 | 23:59

Updated-13 Feb, 2026 | 19:32

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Vendor-Microsoft Corporation

Product-edge_chromium Microsoft Edge (Chromium-based)

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2019-16305

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.50% / 65.45%

7 Day CHG~0.00%

Published-14 Sep, 2019 | 14:04

Updated-05 Aug, 2024 | 01:10

In MobaXterm 11.1 and 12.1, the protocol handler is vulnerable to command injection. A crafted link can trigger a popup asking whether the user wants to run MobaXterm to handle the link. If accepted, another popup appears asking for further confirmation. If this is also accepted, command execution is achieved, as demonstrated by the MobaXterm://`calc` URI.

Vendor-mobatek n/a Microsoft Corporation

Product-windows mobaxterm n/a

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2012-0158

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-94.30% / 99.94%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-05-03||Apply updates per vendor instructions.

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

Product-visual_basic visual_foxpro commerce_server_2009 commerce_server sql_server_2008 sql_server_2000 biztalk_server office_web_components sql_server_2005 office n/a MSCOMCTL.OCX

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-49004

Matching Score-8

Matching Score-8