Microsoft Money vulnerabilities

2 CVEs affecting Microsoft Money, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5823, published 2009-01-02.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-5823, published 2009-01-02. Medium severity, CVSS 4.3. EPSS: 8.4% chance of exploitation in the next 30 days. An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script Host (WSH) on Windows Vista, allows remote attackers to cause a denial of service (access…
• CVE-2000-0777, published 2000-10-20. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the password, aka the "Money Password"…