GCVE - cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*

part: a version: 2010 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visio (`06ecccd5-6df5-51f5-add2-c761fcdf3ea8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-27055`	vulnerable	2026-06-08 05:30:45.835861	Microsoft Visio Security Feature Bypass Vulnerability HIGH (7) Microsoft Visio Security Feature Bypass Vulnerability Published: 2021-03-11T15:48:18.000Z Updated: 2024-08-03T20:40:47.084Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27055	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-0760`	vulnerable	2026-06-08 05:16:33.134306	Details available A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991. Published: 2020-04-15T15:12:40.000Z Updated: 2024-08-04T06:11:05.570Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0760	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-3235`	vulnerable	2026-06-08 05:07:45.109403	Details available Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability." Published: 2016-06-16T01:00:00.000Z Updated: 2025-10-21T23:55:51.339Z Open on db.gcve.eu Reference links https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 http://www.securityfocus.com/archive/1/538685/100/0/threaded http://www.securitytracker.com/id/1036093 http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0012`	vulnerable	2026-06-08 05:07:13.952479	Details available Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass." Published: 2016-01-13T02:00:00.000Z Updated: 2024-08-05T22:08:11.520Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-004 http://www.securitytracker.com/id/1034651	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2557`	vulnerable	2026-06-08 05:06:35.224275	Details available Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office document, aka "Microsoft Office Memory Corruption Vulnerability." Published: 2015-10-14T01:00:00.000Z Updated: 2024-08-06T05:17:27.392Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110 http://www.zerodayinitiative.com/advisories/ZDI-15-519 http://www.securitytracker.com/id/1033803	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2503`	vulnerable	2026-06-08 05:06:35.151093	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2423`	vulnerable	2026-06-08 05:06:34.999103	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.