CVE-2018-1003

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10.

• CWE-119

• http://www.securityfocus.com/bid/103655Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040651Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1003Patch, Vendor Advisory
• http://www.securityfocus.com/bid/103655Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040651Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1003Patch, Vendor Advisory

Published

Apr 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10023Catfish CMS V4.7.21 allows XSS via the pinglun parameter to …
• CVE-2018-10024ubiQuoss Switch VP5208A creates a bcm_password file at /cgi-…
• CVE-2018-10026The WeChat module in YzmCMS 3.7.1 has reflected XSS via the …
• CVE-2018-10027ESTsoft ALZip before 10.76 allows local users to execute arb…
• CVE-2018-10028joyplus-cms 1.6.0 allows remote attackers to obtain sensitiv…
• CVE-2018-10029CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin…
• CVE-2018-10030CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/sitepref…
• CVE-2018-10031CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/modulein…
• CVE-2018-10032CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin…
• CVE-2018-10033CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/si…
• CVE-2018-1004A remote code execution vulnerability exists in the way that…
• CVE-2018-10048iScripts eSwap v2.4 has CSRF via "registration_settings.php"…