Microsoft Access

28 CVEs affecting Microsoft Access. Latest disclosed: 2025-12-09. Critical: 0, High: 14.

Top CVEs affecting Microsoft Access
CVESeverityScorePublishedSummary
CVE-2020-0760High8.82020-04-15A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulne…
CVE-2007-0671High8.82007-02-03Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to exe…
CVE-2025-62552High7.82025-12-09Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-26642High7.82025-04-08Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-26630High7.82025-03-11Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2025-21395High7.82025-01-14Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21366High7.82025-01-14Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21186High7.82025-01-14Microsoft Access Remote Code Execution Vulnerability
CVE-2024-49142High7.82024-12-12Microsoft Access Remote Code Execution Vulnerability
CVE-2020-1582High7.82020-08-17A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who success…
CVE-2018-8312High7.82018-07-11A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vuln…
CVE-2018-0903High7.82018-03-14Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability…
CVE-2025-59235High7.12025-10-14Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2025-59232High7.12025-10-14Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2015-25032015-11-11Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word…
CVE-2013-31572013-09-11Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memor…
CVE-2013-31562013-09-11Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memor…
CVE-2013-31552013-09-11Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memor…
CVE-2010-18812010-07-15The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the mem…
CVE-2010-08142010-07-15The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the memory-allocation…