Filtered by vendor Microsoft Subscriptions
Filtered by product Visio Subscriptions
Total 56 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-1888 1 Microsoft 2 Visio, Visio Viewer 2025-04-11 N/A
Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
CVE-2010-0256 1 Microsoft 1 Visio 2025-04-11 N/A
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
CVE-2010-1681 1 Microsoft 1 Visio 2025-04-11 N/A
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.
CVE-2010-3148 1 Microsoft 1 Visio 2025-04-11 N/A
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
CVE-2013-1301 1 Microsoft 1 Visio 2025-04-11 N/A
Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
CVE-2011-0092 1 Microsoft 1 Visio 2025-04-11 N/A
The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
CVE-2011-0093 1 Microsoft 1 Visio 2025-04-11 N/A
ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."
CVE-2011-1979 1 Microsoft 1 Visio 2025-04-11 N/A
Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
CVE-2022-38010 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-11 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21737 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-01 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-21741 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-01-01 7.1 High
Microsoft Office Visio Information Disclosure Vulnerability
CVE-2023-21736 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-01-01 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-38016 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-01-01 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-43463 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-01-01 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-27055 1 Microsoft 3 365 Apps, Office, Visio 2024-11-21 7 High
Microsoft Visio Security Feature Bypass Vulnerability
CVE-2020-0760 1 Microsoft 10 Access, Excel, Office and 7 more 2024-11-21 8.8 High
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.