CVE-2006-2389EPSS p98.5%

CVE-2006-2389CVE-2006-2389

microsoft / office

Description

Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.

Scoring

CVSS 9.3 ()
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS38.72% probability of exploitation · percentile 98.5% · 2026-10-03T12:00:21Z
Last modified2026-09-23
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.