AC
Product
Access
On CISA KEVExploited in the wild
38
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 24Medium 0Low 0
Watch
Add Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-2026-69614 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69778 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69529 | 8.8 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2016 |
| CVE-2026-64919 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64920 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64914 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64908 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64912 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-64906 | 7.8 | Aug 11 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-62552 | 7.8 | Dec 9 | Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-26642 | 7.8 | Apr 8 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-26630 | 7.8 | Mar 11 | Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally Affected: 2016 |
| CVE-2025-21395 | 7.8 | Jan 14 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2025-21366 | 7.8 | Jan 14 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2025-21186 | 7.8 | Jan 14 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2024-49142 | 7.8 | Dec 12 | Microsoft Access Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2020-1582 | 7.8 | Aug 17 | A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory Affected: 2010; 2013; 2016 |
| CVE-2018-8312 | 7.8 | Jul 11 | A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This… Affected: 2013; 2016 |
| CVE-2018-0903 | 7.8 | Mar 14 | Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects… Affected: 2010; 2013; 2016 |
| CVE-2026-69477 | 7.3 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2025-59235 | 7.1 | Oct 14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally Affected: 2016 |
| CVE-2025-59232 | 7.1 | Oct 14 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally Affected: 2016 |
| CVE-2015-2503 | – | Nov 11 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office… Affected: 2007; 2010; 2013; 2016 |
| CVE-2013-3157 | – | Sep 11 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: 2007; 2010; 2010; 2010; 2010; 2013; +1 more |
| CVE-2013-3156 | – | Sep 11 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: 2007; 2010; 2010; 2010; 2010; 2013; +1 more |
| CVE-2013-3155 | – | Sep 11 | Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: 2007; 2010; 2010; 2010; 2010; 2013; +1 more |
| CVE-2010-1881 | – | Jul 15 | The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach… Affected: 2003 |
| CVE-2010-0814 | – | Jul 15 | The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation approach used by… Affected: 2003; 2007; 2007 |
| CVE-2008-3068 | – | Jul 7 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary… Affected: 2007 |
| CVE-2008-1200 | – | Mar 6 | Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet Engine (msjet40.dll) Affected: 2000 |
| CVE-2007-6357 | – | Dec 15 | Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access Database (.mdb) file Affected: All versions, or not specified |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2003-0665 | – | Oct 20 | Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to… Affected: 97; 2000; 2000; 2000; 2000; 2002; +2 more |
| CVE-2000-0788 | – | Oct 20 | The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute… Affected: 2000 |
| CVE-2000-0419 | – | May 11 | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help,… Affected: 2000 |
| CVE-1999-0364 | – | Jan 1 | Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data Affected: 97 |
Showing 38