CVE-2012-2524
Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrup
CVSS
9.3
No CVSS
EPSS
20.1%
p97
KEV
—
Exploit Today
29
0-100
Published: Aug 15, 2012 · Last modified: Oct 9, 2026 · CWE-119
20.1%EPSS · 30 days20.1%
2026-09-252026-10-23
Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerability."
- www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA12-227A.html
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702
- www.us-cert.govhttp://www.us-cert.gov/cas/techalerts/TA12-227A.html
- docs.microsoft.comhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-057
- oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15702
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1158015.3 MED—
———A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor explains: "khaiii treats the resource directory (--rsc-dir) as trusted input, like a binary or a shared library. To use this defect, an attacker must already be able to write to that directory. With that access, an attacker can change the analysis results without this defect." This vulnerability only affects products that are no longer supported by the maintainer.12hCVE-2026-957213.3 LOW0.2%
——0A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.14hCVE-2026-957204.4 MED1.1%
——0A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.14hCVE-2026-957146.8 MED7.6%
——2A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.6hCVE-2026-957137.0 HIG6.5%
——2An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data.14hCVE-2026-957107.1 HIG7.7%
——2An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected system, with a limited impact to the integrity of the affected component.14h