CVE Watch—

CVE-2012-1856

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

72.0%

p99

KEV

SÍ

3 mar 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

72.0%EPSS · 30 días72.2%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Microsoft / Office

Vulnerabilidad

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Añadido a KEV

3 mar 2022

Remediar antes de

24 mar 2022

Uso conocido en ransomware

Descripción resumida

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2012-1856

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-217157.3 ALT

96.1%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability57d CVE-2021-422927.8 ALT

98.7%

KEV—80Microsoft Excel Security Feature Bypass57d CVE-2021-386467.8 ALT

94.7%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability66d CVE-2021-270597.6 ALT

93.3%

KEV—78Microsoft Office Remote Code Execution Vulnerability57d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—