AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2008-1434

HIGH · CVSS 9.3 EPSS 30.87%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-05-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft, Office. Its EPSS score suggests a 30.9% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2008-1434
Severity
HIGH
CVSS
9.3
EPSS
30.87%
Microsoft Office

Original NVD Description

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.