cbcvebase.

Microsoft Visio vulnerabilities

54 known vulnerabilities affecting microsoft/visio.

Total CVEs
54
CISA KEV
2
actively exploited
Public exploits
8
Exploited in wild
5
Severity breakdown
CRITICAL32HIGH19MEDIUM3

Vulnerabilities

Page 3 of 3
CVE-2006-3877P3CRITICALCVSS 9.3v2002v20032006-10-10
CVE-2006-3877 [CRITICAL] CVE-2006-3877: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2 Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
nvd
CVE-2004-0848P3HIGHCVSS 7.5v20022005-02-08
CVE-2004-0848 [HIGH] CVE-2004-0848: Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.
nvd
CVE-2024-43463P3HIGHCVSS 7.8v20162024-09-10
CVE-2024-43463 [HIGH] CWE-416 CVE-2024-43463: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2024-20673P3HIGHCVSS 7.8v20162024-02-13
CVE-2024-20673 [HIGH] CWE-693 CVE-2024-20673: Microsoft Office Remote Code Execution Vulnerability Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2024-38016P3HIGHCVSS 7.8v20162024-09-19
CVE-2024-38016 [HIGH] CWE-284 CVE-2024-38016: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-38010P3HIGHCVSS 7.8v2013v20162022-09-13
CVE-2022-38010 [HIGH] CVE-2022-38010: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2022-44695P3HIGHCVSS 7.8v2013v20162022-12-13
CVE-2022-44695 [HIGH] CVE-2022-44695: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2023-21736P3HIGHCVSS 7.8v2013v20162023-01-10
CVE-2023-21736 [HIGH] CWE-681 CVE-2023-21736: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2023-21737P3HIGHCVSS 7.8v2013v20162023-01-10
CVE-2023-21737 [HIGH] CWE-122 CVE-2023-21737: Microsoft Office Visio Remote Code Execution Vulnerability Microsoft Office Visio Remote Code Execution Vulnerability
nvd
CVE-2013-1301P3MEDIUMCVSS 4.3v2003v2007+1 more2013-05-15
CVE-2013-1301 [MEDIUM] CWE-200 CVE-2013-1301: Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
nvd
CVE-2023-21741P3HIGHCVSS 7.1v2013v20162023-01-10
CVE-2023-21741 [HIGH] CWE-125 CVE-2023-21741: Microsoft Office Visio Information Disclosure Vulnerability Microsoft Office Visio Information Disclosure Vulnerability
nvd
CVE-2015-2423P4MEDIUMCVSS 4.3v2007v2010+2 more2015-08-15
CVE-2015-2423 [MEDIUM] CWE-200 CVE-2015-2423: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint
nvd
CVE-2021-27055P4HIGHCVSS 7.0v2010v2013+1 more2021-03-11
CVE-2021-27055 [HIGH] CVE-2021-27055: Microsoft Visio Security Feature Bypass Vulnerability Microsoft Visio Security Feature Bypass Vulnerability
nvd
CVE-2016-0012P4MEDIUMCVSS 4.3v2007v2010+2 more2016-01-13
CVE-2016-0012 [MEDIUM] CWE-200 CVE-2016-0012: Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Offic Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, Po
nvd
Microsoft Visio vulnerabilities | cvebase