Known Vulnerabilities for Visio by Microsoft

Listed below are 10 of the newest known vulnerabilities associated with "Visio" by "Microsoft".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-27055 Microsoft Visio Security Feature Bypass Vulnerability 7 - HIGH 2021-03-11 2023-12-29
CVE-2020-0760 A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft ... 8.8 - HIGH 2020-04-15 2021-07-21
CVE-2016-3364 Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory C... 7.8 - HIGH 2016-09-14 2018-10-12
CVE-2016-3235 Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle ... 7.8 - HIGH 2016-06-16 2018-10-12
CVE-2016-0012 Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP... 4.3 - MEDIUM 2016-01-13 2018-10-12
CVE-2015-2557 Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML da... 9.3 - HIGH 2015-10-14 2018-10-12
CVE-2015-2503 Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publis... 9.3 - HIGH 2015-11-11 2018-10-12
CVE-2015-2423 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 G... 4.3 - MEDIUM 2015-08-15 2019-05-15
CVE-2013-1301 Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containin... 4.3 - MEDIUM 2013-05-15 2018-10-12
CVE-2013-0079 Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers inco... 9.3 - HIGH 2013-03-13 2018-10-12
Results limited to 10 most recent vulnerabilities

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationMicrosoftVisio2016AllAllAll
ApplicationMicrosoftVisio2013sp1AllAll
ApplicationMicrosoftVisio2010sp2AllAll
ApplicationMicrosoftVisio2010sp1x86All
ApplicationMicrosoftVisio2010sp1x64All
ApplicationMicrosoftVisio2007sp3AllAll
ApplicationMicrosoftVisio2007sp2AllAll
ApplicationMicrosoftVisio2007sp1AllAll
ApplicationMicrosoftVisio2007AllAllAll
ApplicationMicrosoftVisio2003sp1AllAll
ApplicationMicrosoftVisio2003sp3AllAll
ApplicationMicrosoftVisio2003sp2multilingual_user_interface_packAll
ApplicationMicrosoftVisio2003sp2AllAll
ApplicationMicrosoftVisio2003AllAllAll
ApplicationMicrosoftVisio2002sp2stdAll
ApplicationMicrosoftVisio2002sp2standardAll
ApplicationMicrosoftVisio2002sp2professionalAll
ApplicationMicrosoftVisio2002sp2proAll
ApplicationMicrosoftVisio2002sp2AllAll
ApplicationMicrosoftVisio2002sp1AllAll
Results limited to 20 most recent known configurations
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report