Show filters
391 Total Results
Displaying 21-30 of 391
Sort by:
Attacker Value
Unknown

Microsoft Tagged Image File Format Heap Overflow

Disclosure Date: November 06, 2013 (last updated July 25, 2024)
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.
Attacker Value
Unknown

Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability

Disclosure Date: August 15, 2012 (last updated July 17, 2024)
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerce Server 2007 SP2, Commerce Server 2009 Gold and R2, Host Integration Server 2004 SP1, Visual FoxPro 8.0 SP1, Visual FoxPro 9.0 SP2, and Visual Basic 6.0 Runtime allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption, aka "MSCOMCTL.OCX RCE Vulnerability."
Attacker Value
Unknown

CVE-2025-21394

Disclosure Date: February 11, 2025 (last updated February 20, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21390

Disclosure Date: February 11, 2025 (last updated February 20, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21387

Disclosure Date: February 11, 2025 (last updated February 20, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21386

Disclosure Date: February 11, 2025 (last updated February 20, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21381

Disclosure Date: February 11, 2025 (last updated February 20, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21362

Disclosure Date: January 14, 2025 (last updated January 18, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21354

Disclosure Date: January 14, 2025 (last updated January 22, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2025-21338

Disclosure Date: January 14, 2025 (last updated January 22, 2025)
GDI+ Remote Code Execution Vulnerability
0