VendorsMicrosoftactivexany version
Vulnerabilities

Microsoft ActiveX any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2008-0437
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.
Published 2008-01-23 · Modified
10.01 PoCEPSS 0.581
CVE-2019-19168
Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
Published 2020-05-06 · Modified
9.8EPSS 0.016
CVE-2019-19169
Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
Published 2020-05-06 · Modified
9.8EPSS 0.016
CVE-2008-0470
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method.
Published 2008-01-29 · Modified
9.31 PoCEPSS 0.309
CVE-2008-0551
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party information.
Published 2008-02-01 · Modified
9.31 PoCEPSS 0.297
CVE-2008-0078
Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."
Published 2008-02-12 · Modified
9.3EPSS 0.291
CVE-2019-19164
Dext5 Upload ActiveX Arbitrary File Execution Vulnerability
Published 2020-05-07 · Modified
8.8EPSS 0.008