Microsoft Windows Data Access Components vulnerabilities

3 CVEs affecting Microsoft Windows Data Access Components, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-1891, published 2012-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-0027, published 2011-01-12. High severity, CVSS 9.3. EPSS: 54.4% chance of exploitation in the next 30 days. Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote…
CVE-2011-0026, published 2011-01-12. High severity, CVSS 9.3. EPSS: 34.4% chance of exploitation in the next 30 days. Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows…
CVE-2012-1891, published 2012-07-10. Critical severity, CVSS 9.8. EPSS: 29.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML…