Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Visual Basic for Applications Insecure Library Loading Vulnerability," as exploited in the wild in July 2012.
結論預警: CVE-2012-1854 綜合評估為嚴重在野威脅（95.2/100）：CVSS 技術影響為高級，利用機率偏高（EPSS 21.03%，百分位 97%） 核心證據: CISA 已知被利用漏洞目錄（KEV）已於 2026-04-13 確認在野利用，影響 Microsoft / Visual Basic for Applications (VBA)，弱點類型（CWE-426），攻擊者可能未經認證遠端取得高權限管理存取。 近一日 EPSS 上升 +17.89%，被利用關注度持續升高。 強制指令: CISA 處置期限已過，應以應急修補優先立即處理。
風險隨態勢動態變化；本站持續評估並同步更新本頁展示內容。
: Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability · CISA KEV 詳情
: 2026-04-13
: 2026-04-27
: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
EPSS 日更估計相對被利用可能性；百分位表示該 CVE 在已評分漏洞中的相對排名（越高表示相對更嚴重）。
| # | 日期 | 舊 EPSS 分數 | 新 EPSS 分數 | 變化（新 − 舊） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 3.14% | 21.03% | +17.89% |
| 2 | 2026-06-11 | 3.63% | 3.14% | -0.49% |
| 3 | 2026-06-10 | — | 3.63% | — |
完整 EPSS 歷史 （共 18 筆）
該 CVE 的 CVSS 指標。
| 底座分 | 版本 | 嚴重度 | 向量 | 可利用性 | 影響 | 分數來源 |
|---|---|---|---|---|---|---|
| 7.8 | 3.1 | HIGH |
|
1.8 | 5.9 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
| 6.9 | 2.0 | MEDIUM |
|
3.4 | 10.0 | [email protected] |
: Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'
| 廠商 | 產品 | 版本 | 原始 CPE |
|---|---|---|---|
| microsoft | office | 2003 | cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:* |
| microsoft | office | 2007 | cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:* |
| microsoft | office | 2007 | cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x64:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x86:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x64:* |
| microsoft | office | 2010 | cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:* |
| microsoft | visual_basic_for_applications | — | cpe:2.3:a:microsoft:visual_basic_for_applications:*:*:*:*:*:*:*:* |
| microsoft | visual_basic_for_applications_sdk | — | cpe:2.3:a:microsoft:visual_basic_for_applications_sdk:*:*:*:*:*:*:*:* |
| URL | 標籤 |
|---|---|
| http://www.us-cert.gov/cas/techalerts/TA12-192A.html | US Government Resource |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046 | Mitigation Vendor Advisory |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14950 | Broken Link |
| https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2012/ms12-046 | Mitigation Vendor Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1854 | US Government Resource |