kbrain

CVE-2010-0815

HIGH · CVSS 9.3EPSS 22.4%EU EUVD

VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Visual Basic for Applications (VBA), and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "VBE6.DLL Stack Memory Corruption Vulnerability."

Key facts

CVSS score
9.3 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-94
EPSS score
22.4% (98th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2010-0841)
Published
May 12, 2010
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-0841 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • microsoft / office
  • microsoft / office
  • microsoft / office
  • microsoft / office
  • microsoft / visual basic for applications
  • microsoft / visual basic sdk
  • microsoft / visual basic sdk
  • microsoft / visual basic sdk

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain