CVE

CVE-2012-1854

Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

Microsoft · Visual Basic for Applications (VBA)

Date added (CISA)

2026-04-13

Remediation due

2026-04-27

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.