[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmU4gpYgMStpSdmGLUczkEWeKQ1X5dTudauZ_5AIcBGs":3,"g5a-family:microsoft\u002Faccess":145,"g5a-ex:microsoft\u002Faccess@*":146},{"success":4,"data":5},true,{"product":6,"versions":47,"topVulnerabilitiesByEpss":60,"kevVulnerabilities":117,"seoMetadata":123,"meta":142},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":46},"microsoft","access",12,26,1,"2025-12-09",[14,18,20,22,25,28,31,33,36,39,41,43],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2.0",{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"2000",6,{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},"2002",3,{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},"2003",4,{"version":32,"cve_count":24,"kev_count":16,"has_kev":17},"2007",{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},"2010",7,{"version":37,"cve_count":38,"kev_count":16,"has_kev":17},"2013",8,{"version":40,"cve_count":9,"kev_count":16,"has_kev":17},"2016",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"95",{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},"97",2,"Access by Microsoft is a technology product with 12 tracked versions and 26 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[48,49,50,51,52,53,54,55,56,57,58,59],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},{"version":26,"cve_count":27,"kev_count":11,"has_kev":4},{"version":29,"cve_count":30,"kev_count":11,"has_kev":4},{"version":32,"cve_count":24,"kev_count":16,"has_kev":17},{"version":34,"cve_count":35,"kev_count":16,"has_kev":17},{"version":37,"cve_count":38,"kev_count":16,"has_kev":17},{"version":40,"cve_count":9,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":45,"kev_count":16,"has_kev":17},[61,69,76,83,88,95,99,104,108,112],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":4,"epssScore":68},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",8.8,"v3.1","High",0.43241,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":74,"severity":67,"isKev":17,"epssScore":75},"CVE-2003-0665","Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to the control.","2003-10-20",7.5,"v2",0.30071,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":17,"epssScore":82},"CVE-2010-0814","The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation, which allows remote attackers to execute arbitrary code via a web site that references multiple ActiveX controls, as demonstrated by the ImexGrid and FieldList controls, aka \"Access ActiveX Control Vulnerability.\"","2010-07-15",9.3,"Critical",0.22886,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":73,"cvssVersion":74,"severity":67,"isKev":17,"epssScore":87},"CVE-2000-0419","The Office 2000 UA ActiveX Control is marked as \"safe for scripting,\" which allows remote attackers to conduct unauthorized activities via the \"Show Me\" function in Office Help, aka the \"Office 2000 UA Control\" vulnerability.","2000-05-11",0.21377,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":93,"severity":67,"isKev":17,"epssScore":94},"CVE-2018-8312","A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka \"Microsoft Access Remote Code Execution Vulnerability.\" This affects Microsoft Access, Microsoft Office.","2018-07-11",7.8,"v3.0",0.21335,{"cveId":96,"description":97,"publishedDate":79,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":17,"epssScore":98},"CVE-2010-1881","The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka \"ACCWIZ.dll Uninitialized Variable Vulnerability.\"",0.20332,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":17,"epssScore":103},"CVE-2013-3155","Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3157.","2013-09-11",0.20184,{"cveId":105,"description":106,"publishedDate":102,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":17,"epssScore":107},"CVE-2013-3156","Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access File Format Memory Corruption Vulnerability.\"",0.20022,{"cveId":109,"description":110,"publishedDate":102,"cvssScore":80,"cvssVersion":74,"severity":81,"isKev":17,"epssScore":111},"CVE-2013-3157","Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3155.",0.18682,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":73,"cvssVersion":74,"severity":67,"isKev":17,"epssScore":116},"CVE-2008-3068","Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S\u002FMIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.","2008-07-07",0.17404,[118],{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"severity":67,"isKev":4,"epssScore":68,"cisaVulnName":119,"cisaDateAdded":120,"cisaShortDescription":121,"cisaRequiredAction":122},"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":124,"metaDescription":125,"keywords":126,"structuredData":127},"Access by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Access by Microsoft covering 12 versions with 26 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Access vulnerabilities, Access security, Access CVE, Microsoft Access, Access threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Access KEV, Access exploited vulnerabilities",{"@context":128,"@type":129,"name":130,"description":125,"url":131,"manufacturer":132,"applicationCategory":136,"softwareVersion":137,"mainEntity":138},"https:\u002F\u002Fschema.org","SoftwareApplication","Access","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Faccess",{"@type":133,"name":134,"url":135},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","12 versions tracked",{"@type":139,"name":140,"description":141,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Access Security Vulnerabilities","Security vulnerabilities affecting Access by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":143,"apiVersion":144},"2026-10-17T16:49:17.051Z","3.0",[],{"rows":147,"total":11,"capped":17,"failed":16},[148],{"cveId":62,"name":119,"severity":67,"cvss":65,"added":120,"epss":68,"published":149,"ranges":150,"checked":4,"hits":151,"covers":17},"2007-02-03T01:28:00",[23,26,29],[]]