[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCM5evB_I4bfcEtMwjH_AdpIRLaVq0VP0ecVpBHMk9tU":3,"g5a-family:microsoft\u002Fproject":134,"g5a-ex:microsoft\u002Fproject@*":150},{"success":4,"data":5},true,{"product":6,"versions":40,"topVulnerabilitiesByEpss":49,"kevVulnerabilities":106,"seoMetadata":112,"meta":131},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":39},"microsoft","project",8,30,1,"2020-06-09",[14,17,20,23,28,31,33,36],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"2000",9,{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},"2002",18,{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},"2003",10,{"version":24,"cve_count":25,"kev_count":26,"has_kev":27},"2007",6,0,false,{"version":29,"cve_count":30,"kev_count":26,"has_kev":27},"2010",4,{"version":32,"cve_count":30,"kev_count":26,"has_kev":27},"2013",{"version":34,"cve_count":35,"kev_count":26,"has_kev":27},"2016",5,{"version":37,"cve_count":38,"kev_count":26,"has_kev":27},"98",2,"Project by Microsoft is a technology product with 8 tracked versions and 30 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[41,42,43,44,45,46,47,48],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":11,"has_kev":4},{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},{"version":24,"cve_count":25,"kev_count":26,"has_kev":27},{"version":29,"cve_count":30,"kev_count":26,"has_kev":27},{"version":32,"cve_count":30,"kev_count":26,"has_kev":27},{"version":34,"cve_count":35,"kev_count":26,"has_kev":27},{"version":37,"cve_count":38,"kev_count":26,"has_kev":27},[50,58,64,70,75,82,87,92,97,102],{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":27,"epssScore":57},"CVE-2005-2127","Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the \"COM Object Instantiation Memory Corruption vulnerability.\"","2005-08-19",7.5,"v2","High",0.63665,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":22,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":63},"CVE-2003-0347","Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.","2003-10-20","Critical",0.54873,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":69},"CVE-2008-4255","Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an \"allocation error\" and memory corruption, aka \"Windows Common AVI Parsing Overflow Vulnerability.\"","2008-12-10",9.3,0.53703,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":74},"CVE-2004-0200","Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.","2004-09-28",0.49024,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":80,"severity":56,"isKev":4,"epssScore":81},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",8.8,"v3.1",0.43241,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":86},"CVE-2006-3864","Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an \"array boundary condition\" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.","2006-10-10",0.33848,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":91},"CVE-2008-1088","Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file, related to improper validation of \"memory resource allocations.\"","2008-04-08",0.31934,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":27,"epssScore":96},"CVE-2004-0848","Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) \"%00 (null byte) in .doc filenames or (2) \"%0a\" (carriage return) in .rtf filenames.","2005-02-08",0.27489,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":101},"CVE-2009-2501","Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted PNG image file, aka \"GDI+ PNG Heap Overflow Vulnerability.\"","2009-10-14",0.26715,{"cveId":103,"description":104,"publishedDate":100,"cvssScore":68,"cvssVersion":55,"severity":62,"isKev":27,"epssScore":105},"CVE-2009-2500","Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted WMF image file, aka \"GDI+ WMF Integer Overflow Vulnerability.\"",0.23647,[107],{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"severity":56,"isKev":4,"epssScore":81,"cisaVulnName":108,"cisaDateAdded":109,"cisaShortDescription":110,"cisaRequiredAction":111},"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":113,"metaDescription":114,"keywords":115,"structuredData":116},"Project by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Project by Microsoft covering 8 versions with 30 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Project vulnerabilities, Project security, Project CVE, Microsoft Project, Project threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Project KEV, Project exploited vulnerabilities",{"@context":117,"@type":118,"name":119,"description":114,"url":120,"manufacturer":121,"applicationCategory":125,"softwareVersion":126,"mainEntity":127},"https:\u002F\u002Fschema.org","SoftwareApplication","Project","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fproject",{"@type":122,"name":123,"url":124},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","8 versions tracked",{"@type":128,"name":129,"description":130,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Project Security Vulnerabilities","Security vulnerabilities affecting Project by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":132,"apiVersion":133},"2026-10-17T21:22:44.845Z","3.0",[135,138,140,142,144,146,148],{"product":136,"cves":137},"project_server",24,{"product":139,"cves":38},"project_2016",{"product":141,"cves":11},"project_portfolio_server",{"product":143,"cves":11},"project_rome",{"product":145,"cves":11},"project_standard",{"product":147,"cves":11},"project_professional",{"product":149,"cves":11},"project_multilingual_user_interface_pack",{"rows":151,"total":11,"capped":27,"failed":26},[152],{"cveId":76,"name":108,"severity":56,"cvss":79,"added":109,"epss":81,"published":153,"ranges":154,"checked":4,"hits":157,"covers":27},"2007-02-03T01:28:00",[155,156,21],"2000-sr1","2002-sp1",[]]