Microsoft Hyperlink Object Library vulnerabilities

2 CVEs affecting Microsoft Hyperlink Object Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-3438, published 2006-08-09.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-3086, published 2006-06-19. High severity, CVSS 9.3. EPSS: 56.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll) allows remote attackers to cause a denial of service (crash) and…
• CVE-2006-3438, published 2006-08-09. High severity, CVSS 9.3. EPSS: 11.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to execute arbitrary code via crafted hyperlinks that are not…