[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f35M_ioj3WurOnt9w1FK9lXzMoSnByaaHg5mF31Eelv0":3,"g5a-family:microsoft\u002Fvisio":142,"g5a-ex:microsoft\u002Fvisio@*":149},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":51,"kevVulnerabilities":109,"seoMetadata":120,"meta":139},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"microsoft","visio",9,54,2,"2024-09-19",[14,19,22,25,27,30,32,35,37],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2000",1,0,false,{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},"2002",31,{"version":23,"cve_count":24,"kev_count":16,"has_kev":4},"2003",19,{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},"2003_sp3",{"version":28,"cve_count":29,"kev_count":16,"has_kev":4},"2007",18,{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},"2007_sp1",{"version":33,"cve_count":34,"kev_count":16,"has_kev":4},"2010",11,{"version":36,"cve_count":34,"kev_count":16,"has_kev":4},"2013",{"version":38,"cve_count":39,"kev_count":16,"has_kev":4},"2016",15,"Visio by Microsoft is a technology product with 9 tracked versions and 54 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":16,"has_kev":4},{"version":23,"cve_count":24,"kev_count":16,"has_kev":4},{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":16,"has_kev":4},{"version":31,"cve_count":11,"kev_count":17,"has_kev":18},{"version":33,"cve_count":34,"kev_count":16,"has_kev":4},{"version":36,"cve_count":34,"kev_count":16,"has_kev":4},{"version":38,"cve_count":39,"kev_count":16,"has_kev":4},[52,60,66,73,79,83,88,95,101,105],{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":57,"severity":58,"isKev":18,"epssScore":59},"CVE-2010-1681","Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.","2010-05-06",7.6,"v2","High",0.67309,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":57,"severity":58,"isKev":18,"epssScore":65},"CVE-2005-2127","Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the \"COM Object Instantiation Memory Corruption vulnerability.\"","2005-08-19",7.5,0.63665,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":72},"CVE-2003-0347","Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.","2003-10-20",10,"Critical",0.54873,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":78},"CVE-2007-5348","Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via an image file with crafted gradient sizes in gradient fill input, which triggers a heap-based buffer overflow related to GdiPlus.dll and VGX.DLL, aka \"GDI+ VML Buffer Overrun Vulnerability.\"","2008-09-11",9.3,0.52886,{"cveId":80,"description":81,"publishedDate":76,"cvssScore":77,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":82},"CVE-2008-3013","gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka \"GDI+ GIF Parsing Vulnerability.\"",0.52065,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":77,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":87},"CVE-2004-0200","Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.","2004-09-28",0.49024,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":93,"severity":58,"isKev":4,"epssScore":94},"CVE-2016-3235","Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka \"Microsoft Office OLE DLL Side Loading Vulnerability.\"","2016-06-16",7.8,"v3.1",0.43308,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":93,"severity":58,"isKev":4,"epssScore":100},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",8.8,0.43241,{"cveId":102,"description":103,"publishedDate":76,"cvssScore":77,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":104},"CVE-2008-3015","Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a BMP image file with a malformed BitMapInfoHeader that triggers a buffer overflow, aka \"GDI+ BMP Integer Overflow Vulnerability.\"",0.39272,{"cveId":106,"description":107,"publishedDate":76,"cvssScore":77,"cvssVersion":57,"severity":71,"isKev":18,"epssScore":108},"CVE-2008-3014","Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed WMF image file that triggers improper memory allocation, aka \"GDI+ WMF Buffer Overrun Vulnerability.\"",0.36722,[110,115],{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"severity":58,"isKev":4,"epssScore":100,"cisaVulnName":111,"cisaDateAdded":112,"cisaShortDescription":113,"cisaRequiredAction":114},"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"severity":58,"isKev":4,"epssScore":94,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"Microsoft Office OLE DLL Side Loading Vulnerability","2021-11-03","Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.","Apply updates per vendor instructions.",{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"Visio by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Visio by Microsoft covering 9 versions with 54 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Visio vulnerabilities, Visio security, Visio CVE, Microsoft Visio, Visio threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Visio KEV, Visio exploited vulnerabilities",{"@context":125,"@type":126,"name":127,"description":122,"url":128,"manufacturer":129,"applicationCategory":133,"softwareVersion":134,"mainEntity":135},"https:\u002F\u002Fschema.org","SoftwareApplication","Visio","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fvisio",{"@type":130,"name":131,"url":132},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","9 versions tracked",{"@type":136,"name":137,"description":138,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Visio Security Vulnerabilities","Security vulnerabilities affecting Visio by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":140,"apiVersion":141},"2026-10-17T21:28:35.931Z","3.0",[143,145,147],{"product":144,"cves":9},"visio_viewer",{"product":146,"cves":16},"visio_professional",{"product":148,"cves":16},"visio_standard",{"rows":150,"total":11,"capped":18,"failed":17},[151,156],{"cveId":96,"name":111,"severity":58,"cvss":99,"added":112,"epss":100,"published":152,"ranges":153,"checked":4,"hits":155,"covers":18},"2007-02-03T01:28:00",[154,23],"2002-sp2",[],{"cveId":89,"name":116,"severity":58,"cvss":92,"added":117,"epss":94,"published":157,"ranges":158,"checked":4,"hits":162,"covers":18},"2016-06-16T01:59:36.983",[159,160,161,38],"2007-sp3","2010-sp2","2013-sp1",[]]