Unscored severity · published Oct 20, 2000
CVE-2000-0788
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute…
–
CVSS
8.4%
EPSS
No
On KEV
Description
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Access · Microsoft
2000 · source: NVD
WO
Word · Microsoft
2000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0788
Exploit
http://www.securityfocus.com/bid/1566
www.securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5322
More from Access
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
8.8
CVE-2026-69614
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2026-69778
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2026-69529
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2020-0760
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'