CVE Watch—

CVE-2012-1856

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

72.2%

p99

KEV

SÍ

3 mar 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

61.8%EPSS · 30 días72.2%

2026-08-022026-08-31

Ficha del catálogo KEV

Producto

Microsoft / Office

Vulnerabilidad

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Añadido a KEV

3 mar 2022

Remediar antes de

24 mar 2022

Uso conocido en ransomware

Descripción resumida

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2012-1856

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-217157.3 ALT

95.8%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12d CVE-2021-422927.8 ALT

98.6%

KEV—80Microsoft Excel Security Feature Bypass12d CVE-2021-386467.8 ALT

94.3%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability21d CVE-2021-270597.6 ALT

92.9%

KEV—78Microsoft Office Remote Code Execution Vulnerability12d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—

99.9%

KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—