Vulnerabilità Microsoft

15.391 CVE

CVE-2008-0392

Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file with a long (1) ConnectionName or (2) CommandName line.

microsoft visual_basic

0.30EPSS

CVE-2012-0169

Alta 9.3

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."

microsoft internet_explorer

0.30EPSS

CVE-2017-0105

Media 5.5

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from out-of-b…

microsoft office · microsoft office_compatibility_pack · microsoft office_web_apps · microsoft sharepoint_server · e altri 3

0.30EPSS

CVE-2006-6908

Alta 10.0

Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and …

broadcom widcomm_bluetooth · microsoft windows_embedded_compact · microsoft windows_mobile

0.30EPSS

CVE-2021-26412

Critica 9.1

Microsoft Exchange Server Remote Code Execution Vulnerability

microsoft exchange_server

0.30EPSS

CVE-2003-0530

Alta 7.5

Buffer overflow in the BR549.DLL ActiveX control for Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to execute arbitrary code.

microsoft ie · microsoft internet_explorer

0.30EPSS

CVE-2013-0029

Alta 7.5

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CHTML Use After Free Vulnerability."

microsoft internet_explorer

0.30EPSS

CVE-2007-1347

Alta 7.1

Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause a denial of service (memory corruption and crash) via an Office file with crafted document summary information, which c…

microsoft windows_explorer

0.30EPSS

CVE-2015-0065

Alta 9.3

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."

microsoft word

0.30EPSS

CVE-2016-7182

Critica 9.8

The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Bu…

microsoft live_meeting · microsoft lync · microsoft office · microsoft skype_for_business · e altri 8

0.30EPSS

CVE-2021-26701

Alta 8.1

.NET Core Remote Code Execution Vulnerability

fedoraproject fedora · microsoft .net · microsoft .net_core · microsoft powershell_core · e altri 1

0.30EPSS

CVE-2015-2523

Alta 9.3

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memo…

microsoft excel · microsoft excel_viewer · microsoft office_compatibility_pack

0.30EPSS

CVE-2008-3018

Alta 9.3

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the "Malformed PICT Filter Vulnerability,"…

microsoft office · microsoft office_converter_pack · microsoft works

0.30EPSS

CVE-2008-3020

Alta 9.3

Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."

microsoft office · microsoft office_converter_pack · microsoft works

0.30EPSS

CVE-2014-1785

Alta 9.3

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE…

microsoft internet_explorer

0.30EPSS

CVE-2004-0840

Alta 10.0

The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary …

microsoft exchange_server · microsoft windows_server_2003 · microsoft windows_xp

0.30EPSS

CVE-2024-26185

Media 6.5

Windows Compressed Folder Tampering Vulnerability

microsoft windows_11_22h2 · microsoft windows_11_23h2

0.30EPSS

CVE-2013-0011

Alta 10.0

The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulner…

microsoft windows_7 · microsoft windows_server_2008

0.30EPSS

CVE-2018-12571

Critica 9.8

uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic ampl…

microsoft forefront_unified_access_gateway

0.30EPSS

CVE-2007-0029

Alta 9.3

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability."

microsoft excel · microsoft excel_viewer · microsoft office · microsoft works

0.30EPSS

CVE-2015-2432

Alta 9.3

ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbit…

microsoft windows_7 · microsoft windows_8 · microsoft windows_8.1 · microsoft windows_rt · e altri 4

0.30EPSS

CVE-2009-0244

Alta 8.8

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary …

microsoft windows_mobile

0.30EPSS

CVE-2014-6345

Media 4.3

Microsoft Internet Explorer 9 and 10 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."

microsoft internet_explorer

0.30EPSS

CVE-2016-3315

Media 5.5

Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Information Disclosure Vulnerability."

microsoft onenote · microsoft onenote_for_mac

0.30EPSS

CVE-2005-2831

Alta 7.5

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use withi…

microsoft ie · microsoft internet_explorer

0.30EPSS