Back to CVE Browser

CVE-2000-0788

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0550%

EPSS Percentile0.37th

PublishedOct 20, 2000

Last ModifiedApr 16, 2026

Vulnerability Description

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.

Affected Platforms (CPE)

📦

Microsoft

Access

= 2000

📦

Microsoft

Word

= 2000

References & Advisories

🔗 http://www.securityfocus.com/bid/1566

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5322

🔗 http://www.securityfocus.com/bid/1566

🔗 http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5322

Related Vulnerabilities

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...