Microsoft
Microsoft Access: vulnerabilidades y CVE
Microsoft Access tiene 38 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 0 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE38
Últimos 12 meses13
Críticas0
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-0671 | Alta (8.8) | 43% | ⚠ Explotación activa | 3 feb 2007 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-69778 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69614 | Alta (8.8) | 0.86% | — | 8 sept 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69529 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69477 | Alta (7.3) | 0.43% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. |
| CVE-2026-64920 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64919 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64914 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64912 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64908 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2026-64906 | Alta (7.8) | 0.47% | — | 11 ago 2026 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2025-62552 | Alta (7.8) | 0.60% | — | 9 dic 2025 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2025-59235 | Alta (7.1) | 0.66% | — | 14 oct 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2025-59232 | Alta (7.1) | 0.48% | — | 14 oct 2025 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2025-26642 | Alta (7.8) | 0.80% | — | 8 abr 2025 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. |
| CVE-2025-26630 | Alta (7.8) | 0.95% | — | 11 mar 2025 | Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally. |
| CVE-2025-21395 | Alta (7.8) | 1.0% | — | 14 ene 2025 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2025-21366 | Alta (7.8) | 1.1% | — | 14 ene 2025 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2025-21186 | Alta (7.8) | 1.1% | — | 14 ene 2025 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2024-49142 | Alta (7.8) | 1.1% | — | 12 dic 2024 | Microsoft Access Remote Code Execution Vulnerability |
| CVE-2020-1582 | Alta (7.8) | 2.7% | — | 17 ago 2020 | A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code… |
| CVE-2020-0760 | Alta (8.8) | 8.8% | — | 15 abr 2020 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991. |
| CVE-2018-8312 | Alta (7.8) | 21% | — | 11 jul 2018 | A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office. |
| CVE-2018-0903 | Alta (7.8) | 16% | — | 14 mar 2018 | Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft… |
| CVE-2015-2503 | Alta (9.3) | 17% | — | 11 nov 2015 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2,… |
| CVE-2013-3157 | Alta (9.3) | 19% | — | 11 sept 2013 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory… |
| CVE-2013-3156 | Alta (9.3) | 20% | — | 11 sept 2013 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access File… |
| CVE-2013-3155 | Alta (9.3) | 20% | — | 11 sept 2013 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka "Access Memory… |
| CVE-2010-1881 | Alta (9.3) | 20% | — | 15 jul 2010 | The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office… |
| CVE-2010-0814 | Alta (9.3) | 23% | — | 15 jul 2010 | The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by Internet Explorer during instantiation,… |
| CVE-2008-3068 | Alta (7.5) | 17% | — | 7 jul 2008 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1)… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.