Vulnerabilities > Microsoft > Access > High

DATE CVE VULNERABILITY TITLE RISK
2020-08-17 CVE-2020-1582 Unspecified vulnerability in Microsoft 365 Apps, Access and Office
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory.
local
low complexity
microsoft
7.8
2008-07-07 CVE-2008-3068 Remote Information Disclosure vulnerability in Microsoft Crypto API X.509 Certificate Validation
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
network
low complexity
microsoft
7.5
2003-10-20 CVE-2003-0665 Buffer Overflow vulnerability in Microsoft Access 2000/2002/97
Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.
network
low complexity
microsoft
7.5
2000-05-11 CVE-2000-0419 Unspecified vulnerability in Microsoft products
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
network
low complexity
microsoft
7.5