Unscored severity · published Jul 15, 2010
CVE-2010-1881
The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach…
–
CVSS
20.3%
EPSS
No
On KEV
Description
The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka "ACCWIZ.dll Uninitialized Variable Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)20.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Access · Microsoft
2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1881
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1881
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-194A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-044
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11756
More from Access
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
8.8
CVE-2026-69614
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2026-69778
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2026-69529
Microsoft Office Access Remote Code Execution Vulnerability
8.8
CVE-2020-0760
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'