Microsoft Visual Basic For Applications — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Visual Basic For Applications, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2010-0815 — CVSS 9.3 (critical): VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and…
• CVE-2012-1854 — CVSS 7.8 (high) — actively exploited: Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual…