[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSF1jYwgpw0oVbxhDGTts_NSdMnbgNyg92ZT1qc4EZ68":3,"g5a-risk:CVE-2012-1854":182},{"success":4,"data":5,"meta":180},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":68,"references":69,"referencesCount":99,"weaknesses":100,"weaknessesCount":109,"isActivelyExploited":4,"cisaInfo":110,"otxData":27,"relatedBlogPosts":111,"seoMetadata":112,"configurations":137,"relatedVendorCves":165,"notableEvents":166},"CVE-2012-1854","What is CVE-2012-1854?","Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.","Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Application...","2012-07-10T21:55:05.587","2026-06-16T23:40:25.993",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":45},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,[],[32],{"Source":33,"Type":34,"CVSSData":35,"BaseSeverity":38,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",6.9,"",3.4,10,false,[],0.21028,[46,46,46,46,46,46,46],"High",[50,55,58,61,65],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"microsoft","office","2003","cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"2007","cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"2010","cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x64:*",{"vendor":51,"product":62,"version":63,"criteria":64,"vulnerable":4},"visual_basic_for_applications","*","cpe:2.3:a:microsoft:visual_basic_for_applications:*:*:*:*:*:*:*:*",{"vendor":51,"product":66,"version":63,"criteria":67,"vulnerable":4},"visual_basic_for_applications_sdk","cpe:2.3:a:microsoft:visual_basic_for_applications_sdk:*:*:*:*:*:*:*:*",5,[70,75,81,86,88,90,92,95],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA12-192A.html","Us-cert",[74],"US Government Resource",{"url":76,"source":77,"tags":78},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2012\u002Fms12-046","Microsoft",[79,80],"Mitigation","Vendor Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A14950","Cisecurity",[85],"Broken Link",{"url":71,"source":72,"tags":87},[74],{"url":76,"source":77,"tags":89},[79,80],{"url":82,"source":83,"tags":91},[85],{"url":93,"source":77,"tags":94},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002FSecurityBulletins\u002F2012\u002Fms12-046",[79,80],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2012-1854","CISA",[74],8,[101],{"id":102,"name":103,"description":104,"extendedDescription":105,"status":106,"abstraction":107,"structure":108},"CWE-426","Untrusted Search Path","The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.","This might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the product uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted product would then execute. The problem extends to any type of critical resource that the product trusts.\nSome of the most common variants of untrusted search path are:","Stable","Base","Simple",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":27},[],{"title":113,"metaDescription":114,"keywords":115,"canonicalUrl":116,"structuredData":117},"What is CVE-2012-1854? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2012-1854, a high severity cyber security vulnerability from 2012. Untrusted search path vulnerability in VBE6.dll in Microsoft...","CVE-2012-1854, CVE-2012-1854 vulnerability, CVE-2012-1854 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, microsoft security, office vulnerability, visual_basic_for_applications vulnerability, visual_basic_for_applications_sdk vulnerability","\u002Fwhat-is\u002Fcve-2012-1854",{"@context":118,"@type":119,"headline":113,"description":114,"datePublished":10,"dateModified":11,"author":120,"publisher":124,"about":128,"mainEntityOfPage":132,"articleSection":135,"keywords":136},"https:\u002F\u002Fschema.org","TechArticle",{"@type":121,"name":122,"url":123},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":121,"name":122,"url":123,"logo":125},{"@type":126,"url":127},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":129,"name":6,"description":130,"additionalType":131},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":133,"@id":134},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2012-1854","Cybersecurity","CVE-2012-1854, CVE-2012-1854 vulnerability, CVE-2012-1854 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[138],{"Operator":27,"Negate":27,"Nodes":139},[140],{"Operator":141,"Negate":44,"CPEMatch":142},"OR",[143,145,147,150,152,155,158,161,163],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A332D04D-CC8C-4F68-A261-BA2F2D8EAD1E",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"08AF794A-435D-4171-9DBB-EB7FAED96DBA",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*","FEECD12A-5BEF-4675-B62E-86CF4A7474D7",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"649B67CD-30E7-447F-82EA-5B1F5FC124EA",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:microsoft:office:2010:-:*:*:*:*:x86:*","67785194-79D6-40DB-AFBF-81D4E7F5D80C",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x64:*","BA85D64C-DAC2-4B41-AB84-1FF76F02F677",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:x86:*","49D1ACFD-4E9F-4D6F-997B-2BE50D65A35C",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"390665EF-39A5-4FB7-93D1-CC5D3DEDEB93",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"99D0A944-E18D-4E24-8614-CE82FD201384",[],[167,174],{"id":168,"eventType":169,"eventTime":170,"details":171,"label":172,"color":173},"f8a8edfb-71c8-43ee-bbd1-073d391da3bd","NEW_CISA","2026-05-05T18:23:48.508333+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":175,"eventType":176,"eventTime":177,"details":178,"label":179,"color":173},"fefe17a3-dc11-4efa-949c-d1cda60fc440","HIGH_EPSS_DELTA","2026-06-16T04:06:51.712234+00:00","Daily EPSS score increased by 0.179 on 2023-12-30","EPSS Score Increased",{"lastModified":11,"cacheTime":181,"version":36},1793207958659,{"score":183,"band":48,"action":184,"scoredAt":185},74,"Emergency patch","2026-07-01T10:18:18.723752+00:00"]