Project (Microsoft) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2024-08-13. Vendor: Microsoft.

CVEs of Project

CVE-2024-38189 - CVSS 8.8 (high), 2024-08-13: Microsoft Project Remote Code Execution Vulnerability
CVE-2020-1322 - CVSS 6.5 (medium), 2020-06-09: An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project…
CVE-2020-0760 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution…
CVE-2019-1264 - CVSS 7.8 (high), 2019-09-11: A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2018-8575 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote…
CVE-2015-2503 - CVSS 9.3 (critical), 2015-11-11: Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3,…
CVE-2009-2502 - CVSS 8.1 (high), 2009-10-14: Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
CVE-2009-2528 - CVSS 9.3 (critical), 2009-10-14: GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary…
CVE-2009-2501 - CVSS 9.3 (critical), 2009-10-14: Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System…
CVE-2009-2504 - CVSS 9.3 (critical), 2009-10-14: Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows…
CVE-2009-2500 - CVSS 9.3 (critical), 2009-10-14: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
CVE-2009-2503 - CVSS 9.3 (critical), 2009-10-14: GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1…
CVE-2009-3126 - CVSS 9.3 (critical), 2009-10-14: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
CVE-2008-4253 - CVSS 8.5 (high), 2008-12-10: The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3…
CVE-2008-4256 - CVSS 8.5 (high), 2008-12-10: The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not…
CVE-2008-4252 - CVSS 8.5 (high), 2008-12-10: The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to…
CVE-2008-4255 - CVSS 9.3 (critical), 2008-12-10: Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual…
CVE-2008-4254 - CVSS 8.5 (high), 2008-12-10: Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and…
CVE-2008-1088 - CVSS 9.3 (critical), 2008-04-08: Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a crafted Project file,…
CVE-2007-0671 - CVSS 8.8 (high), 2007-02-03: Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to…
CVE-2006-3877 - CVSS 9.3 (critical), 2006-10-10: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted…
CVE-2006-3864 - CVSS 9.3 (critical), 2006-10-10: Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted…
CVE-2005-2127 - CVSS 7.5 (high), 2005-08-19: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…
CVE-2004-0848 - CVSS 7.5 (high), 2005-02-08: Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1)…
CVE-2004-0200 - CVSS 9.3 (critical), 2004-09-28: Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to…
CVE-2003-0347 - CVSS 10 (critical), 2003-10-20: Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute…
CVE-2002-0861 - CVSS 7.5 (high), 2002-09-24: Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is…
CVE-2002-0860 - CVSS 5 (medium), 2002-09-24: The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files…
CVE-2002-0727 - CVSS 7.5 (high), 2002-09-24: The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote…
CVE-2000-0419 - CVSS 7.5 (high), 2000-05-11: The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me"…
CVE-1999-0384 - CVSS 4.6 (medium), 1999-01-01: The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses…