Skip to main content

Visual Basic for Applications (VBA) vulnerabilities

1 published alerts for Microsoft Visual Basic for Applications (VBA).

Actively exploited (KEV)

CVE-2012-1854

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Microsoft Visual Basic for Applications (VBA) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2012-1854). Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution. CISA remediation due date: 2026-04-27. If you need help checking exposure, call (864) 335-9223.