# CVEs published 2012-07-10

14 CVEs were published on July 10, 2012: 1 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-0175](https://cve.now/CVE-2012-0175.md): The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Wind (CVSS 8.8)
- [CVE-2012-1522](https://cve.now/CVE-2012-1522.md): Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2012-1524](https://cve.now/CVE-2012-1524.md): Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi (no CVSS)
- [CVE-2012-1854](https://cve.now/CVE-2012-1854.md): Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basi (CVSS 7.8, KEV)
- [CVE-2012-1859](https://cve.now/CVE-2012-1859.md): Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gol (no CVSS)
- [CVE-2012-1860](https://cve.now/CVE-2012-1860.md): Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not prope (no CVSS)
- [CVE-2012-1861](https://cve.now/CVE-2012-1861.md): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Offi (no CVSS)
- [CVE-2012-1862](https://cve.now/CVE-2012-1862.md): Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary we (no CVSS)
- [CVE-2012-1863](https://cve.now/CVE-2012-1863.md): Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and Sha (no CVSS)
- [CVE-2012-1870](https://cve.now/CVE-2012-1870.md): The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 20 (no CVSS)
- [CVE-2012-1890](https://cve.now/CVE-2012-1890.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2012-1891](https://cve.now/CVE-2012-1891.md): Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows r (CVSS 9.8)
- [CVE-2012-1893](https://cve.now/CVE-2012-1893.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS)
- [CVE-2012-1894](https://cve.now/CVE-2012-1894.md): Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other dire (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.