Microsoft Access vulnerabilities, page 2
37 vulnerabilities
Known vulnerabilities in Microsoft Access, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0788microsoftaccess+1
EPSS score8.42%
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.CVE-2000-0419microsoftaccess+9EPSS score21.38%
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.CVE-2010-1881microsoftaccessEPSS score20.33%
The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."CVE-2010-0814microsoftaccessEPSS score22.89%
The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka "Access ActiveX Control Vulnerability."CVE-1999-0364fms_inc.total_vb_sourcebook+1EPSS score5.19%
Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.CVE-2024-49142microsoft365_apps+9EPSS score1.10%
Microsoft Access Remote Code Execution VulnerabilityCVE-2026-69477microsoft365_apps+10EPSS score0.43%
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.CVE-2026-69778microsoft365_apps+12EPSS score0.82%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-69614microsoft365_apps+10EPSS score0.86%
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-69529microsoft365_apps+12EPSS score0.82%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-64908microsoft365_apps+10EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2026-64914microsoft365_apps+10EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2026-64912microsoft365_apps+10EPSS score0.47%
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2026-64920microsoft365_apps+10EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2026-64919microsoft365_apps+10EPSS score0.47%
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2026-64906microsoft365_apps+10EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2006-3877microsoftaccess+13EPSS score13.36%
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.