CVE Watch—

CVE-2012-1856

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

72.0%

p99

KEV

SIM

3 de mar. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

72.0%EPSS · 30 dias72.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Office

Vulnerabilidade

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Adicionado ao KEV

3 de mar. de 2022

Corrigir até

24 de mar. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2012-1856

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-217157.3 ALT

96.1%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability78d CVE-2021-422927.8 ALT

98.7%

KEV—80Microsoft Excel Security Feature Bypass78d CVE-2021-386467.8 ALT

94.8%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability87d CVE-2021-270597.6 ALT

93.4%

KEV—78Microsoft Office Remote Code Execution Vulnerability78d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2015-1641—

99.9%

KEV—80Microsoft Office Memory Corruption Vulnerability—