What’s Vulnerable › Vulnerabilities

CVE-2000-0788

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-10-20 · updated 2026-06-16

Description

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker to execute arbitrary commands.

Affected products

• Microsoft Access: 2000
• Microsoft Word for Android: 2000

References

• http://www.securityfocus.com/bid/1566
• http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5322
• http://www.securityfocus.com/bid/1566
• http://www.securityfocus.com/templates/archive.pike?list=1&msg=398EB9CA.27E03A9C%40nat.bg
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-071
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5322

Get alerted when CVE-2000-0788 or the next vulnerability affects your stack