Intuit

14 CVEs across 8 Intuit products. Browse Intuit vulnerabilities, severities, and proof-of-concept exploits.

Intuit products with known CVEs

ProductCVEs
Quickbooks12
Lacerte2
Turbo Tax2
Bookkeeping1
Proseries1
Quicken1
Quicken 20181
Quicktax1
Intuit CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-14833Medium5.92019-07-09Intuit Lacerte 2017 has Incorrect Access Control.
CVE-2018-3854High7.12018-12-03An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially c…
CVE-2018-11338High7.52018-07-31Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain s…
CVE-2010-51982012-09-06Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudtx11.dll, (2) mfc90e…
CVE-2012-24252012-04-25The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Inte…
CVE-2012-24242012-04-25The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Inte…
CVE-2012-24232012-04-25The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Inte…
CVE-2012-24222012-04-25Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.
CVE-2012-24212012-04-25Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intui…
CVE-2012-24202012-04-25The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Inte…
CVE-2012-24192012-04-25Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through…
CVE-2012-24182012-04-25Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBook…
CVE-2007-63872007-12-15Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intui…
CVE-2007-44712007-09-05Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary…
CVE-2007-03222007-09-05Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via un…
CVE-2001-04652001-06-18TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obta…