CVE-2009-0557
Microsoft Office Object Record Corruption Vulnerability
CVSS
—
Sin CVSS
EPSS
58.6%
p99
KEV
SÍ
8 jun 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
58.6%EPSS · 30 días58.6%
2026-08-022026-08-31
Producto
Microsoft / Office
Vulnerabilidad
Microsoft Office Object Record Corruption Vulnerability
Añadido a KEV
8 jun 2022
Remediar antes de
22 jun 2022
Uso conocido en ransomware
No
Descripción resumida
Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file with a malformed record object.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2009-0557
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-217157.3 ALT95.8%
KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12dCVE-2021-422927.8 ALT98.6%
KEV—80Microsoft Excel Security Feature Bypass12dCVE-2021-386467.8 ALT94.3%
KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability21dCVE-2021-270597.6 ALT92.9%
KEV—78Microsoft Office Remote Code Execution Vulnerability12dCVE-2017-11882—100.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—