Access (Microsoft) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Access

• CVE-2026-69477 - CVSS 7.3 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
• CVE-2026-69614 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69778 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69529 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-64919 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64920 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64908 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64914 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64912 - CVSS 7.8 (high), 2026-08-11: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2026-64906 - CVSS 7.8 (high), 2026-08-11: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2025-62552 - CVSS 7.8 (high), 2025-12-09: Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2025-59235 - CVSS 7.1 (high), 2025-10-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2025-59232 - CVSS 7.1 (high), 2025-10-14: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2025-26642 - CVSS 7.8 (high), 2025-04-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2025-26630 - CVSS 7.8 (high), 2025-03-11: Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.
• CVE-2025-21395 - CVSS 7.8 (high), 2025-01-14: Microsoft Access Remote Code Execution Vulnerability
• CVE-2025-21366 - CVSS 7.8 (high), 2025-01-14: Microsoft Access Remote Code Execution Vulnerability
• CVE-2025-21186 - CVSS 7.8 (high), 2025-01-14: Microsoft Access Remote Code Execution Vulnerability
• CVE-2024-49142 - CVSS 7.8 (high), 2024-12-12: Microsoft Access Remote Code Execution Vulnerability
• CVE-2021-28455 - CVSS 8.8 (high), 2021-05-11: Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
• CVE-2020-1582 - CVSS 7.8 (high), 2020-08-17: A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who…
• CVE-2020-0760 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution…
• CVE-2018-8312 - CVSS 7.8 (high), 2018-07-11: A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution…
• CVE-2018-0903 - CVSS 7.8 (high), 2018-03-14: Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution…
• CVE-2015-2503 - CVSS 9.3 (critical), 2015-11-11: Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3,…
• CVE-2013-3155 - CVSS 9.3 (critical), 2013-09-11: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2013-3157 - CVSS 9.3 (critical), 2013-09-11: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2013-3156 - CVSS 9.3 (critical), 2013-09-11: Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2010-1881 - CVSS 9.3 (critical), 2010-07-15: The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the…
• CVE-2010-0814 - CVSS 9.3 (critical), 2010-07-15: The Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 and 2007 SP1 and SP2 do not properly interact with the…
• CVE-2008-3068 - CVSS 7.5 (high), 2008-07-07: Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by…
• CVE-2008-1200 - CVSS 9.3 (critical), 2008-03-06: Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possibly related to Jet…
• CVE-2007-6357 - CVSS 5.8 (medium), 2007-12-15: Stack-based buffer overflow in Microsoft Office Access allows remote, user-assisted attackers to execute arbitrary code via a crafted Microsoft Access…
• CVE-2007-0671 - CVSS 8.8 (high), 2007-02-03: Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to…
• CVE-2006-3877 - CVSS 9.3 (critical), 2006-10-10: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted…
• CVE-2003-0665 - CVSS 7.5 (high), 2003-10-20: Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code…
• CVE-2000-0788 - CVSS 10 (critical), 2000-10-20: The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an…
• CVE-2000-0419 - CVSS 7.5 (high), 2000-05-11: The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me"…
• CVE-1999-0364 - CVSS 10 (critical), 1999-01-01: Microsoft Access 97 stores a database password as plaintext in a foreign mdb, allowing access to data.