Product by Microsoft

Microsoft Project

30 known vulnerabilities in Microsoft Project (Microsoft), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Microsoft Project (Microsoft)

Critical	CVE-2007-0671	Microsoft Office Excel Remote Code Execution Vulnerability In CISA KEValso in 13 other products	8.8	03.02.2007
High	CVE-2009-2502	Microsoft SQL Server: Buffer Overflow also in 25 other products	8.1	14.10.2009
High	CVE-2020-0760	Microsoft Office: Remote Code Execution also in 15 other products	8.8	15.04.2020
High	CVE-2018-8575	Microsoft Project: Remote Code Execution also in 4 other products	7.8	14.11.2018
High	CVE-2019-1264	Microsoft Office: Security Feature Bypass also in 4 other products	7.8	11.09.2019
Medium	CVE-2020-1322	Microsoft Project: Use of Uninitialized Memory also in 4 other products	6.5	09.06.2020
Not rated	CVE-2005-2127	Microsoft Office: Use of Uninitialized Memory also in 5 other products	—	19.08.2005
Not rated	CVE-2003-0347	Microsoft Visual Basic: Heap-Based Buffer Overflow also in 3 other products	—	04.09.2003
Not rated	CVE-2008-4255	Microsoft Project: Heap-Based Buffer Overflow also in 4 other products	—	10.12.2008
Not rated	CVE-2004-0200	Microsoft picture_it: Buffer Overflow also in 17 other products	—	17.09.2004
Not rated	CVE-2006-3864	Microsoft Office: Memory Corruption also in 2 other products	—	10.10.2006
Not rated	CVE-2008-1088	Microsoft Project: Code Execution	—	08.04.2008
Not rated	CVE-2004-0848	Microsoft Office: Buffer Overflow also in 5 other products	—	08.02.2005
Not rated	CVE-2009-2501	Microsoft SQL Server: Heap-Based Buffer Overflow also in 25 other products	—	14.10.2009
Not rated	CVE-2009-2500	Microsoft SQL Server: Integer Overflow also in 25 other products	—	14.10.2009
Not rated	CVE-2009-3126	Microsoft SQL Server: Integer Overflow also in 25 other products	—	14.10.2009
Not rated	CVE-2009-2503	Microsoft SQL Server: Memory Corruption also in 25 other products	—	14.10.2009
Not rated	CVE-2008-4254	Microsoft Visual FoxPro: Integer Overflow also in 4 other products	—	10.12.2008
Not rated	CVE-2000-0419	Microsoft Office: security vulnerability also in 8 other products	—	12.07.2000
Not rated	CVE-2009-2504	Microsoft SQL Server: Integer Overflow also in 25 other products	—	14.10.2009
Not rated	CVE-2008-4256	Microsoft Visual FoxPro: Memory Corruption also in 4 other products	—	10.12.2008
Not rated	CVE-2008-4252	Microsoft Visual FoxPro: Memory Corruption also in 4 other products	—	10.12.2008
Not rated	CVE-2008-4253	Microsoft Project: Memory Corruption also in 4 other products	—	10.12.2008
Not rated	CVE-2009-2528	Microsoft Office: Memory Corruption also in 25 other products	—	14.10.2009
Not rated	CVE-2002-0727	Microsoft Office: security vulnerability also in 1 other product	—	02.04.2003

All vulnerabilities in search

All products by Microsoft

Key figures

Vulnerabilities